System admin

[Craig]

Is there a way to limit the administrative rights to a
user who we would want to assign admin rights to? We have
a tech, who we only want to allow him to install software
on pc's and NOT do anything administrative to our
network. Is there away to do this through delegation,
group policies, instead of having to make him a local
admin on each pc?

Help is greatly appreciated.

Thanks

 

[Chriss3 [MVP]]

Hello Craig

Yeah there is a way, take use of Group Policies, have a look at

Computer Settings\Windows Settings\Security Settings\
File System - Grant the particular "install manager" Full Control to
%ProgramFiles%
Registry - You can grant permission to a part of registry, may needed for
software installation.

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Tomasz Onyszko]

Is there a way to limit the administrative rights to a
user who we would want to assign admin rights to? We have
a tech, who we only want to allow him to install software
on pc's and NOT do anything administrative to our
network. Is there away to do this through delegation,
group policies, instead of having to make him a local
admin on each pc?

Help is greatly appreciated.

This was discussed today on this list - You can acomplish this by
forcing administrators group membership via Restricted Group settings in
GPO. This option lets You specify who will be a member of specified
group (for example administrators) and then force this setting on all
system which are under the scope of this GPO