Installing Software

[Brian]

We have several hundred computers that are setup in classrooms. The network
administrator has told us we can not put the users in the administrator
group, as the computers are joined to the domain. But the teachers want the
students to be able to install some software on these computers as it is for
learning. We have a product on the computers called deepfreeze so we are not
worried about and changes they can make on the computers as when they reboot
the computer goes back to our default setting. How is it that I give them
permissions to install software with out adding them to the admin group?
Thanks

 

[Star Fleet Admiral Q]

The students will need to be in the "Local Admin" Group on the Desktops, not
the "Domain Admin" Group. This way, you have Admin capability on the
Desktop, but not on the domain.

 

[Brian]

I can not put them in Local admin. as I have been told I can not do this. Is
there an other way for users to do installs? it is not that I don't know how
to put them there or disagree with you, but when your boss tells you he does
not want it done that way I have no choice

 

[Bruce Chambers]

Greetings --

You'll have to ask the teachers to sort out the political issues
with the network administrator. The technical solution, as you know,
is to add the students to the local administrators group. Or to have
someone with admin privileges physically visit each machine to install
the software for the students. Or, of course, your network
administrator could simply use SMS to remotely install the desired
application(s) onto the desired target PCs, all without any human
intervention or having to modify anyone's access privileges.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH