user rights and privileges in Windows 2000 domain

[cosimo]

I am administrator of a domain with:
- n. 1 Windows 2000 server machine
- n. 10 Windows 2000 Pro client machines.
On the domain Active Directory is installed.
I have a lot of domain user without administrative
privileges.
They can't install program on their machine.
Only Administrators can do this!
But there is a problem:
my users need to access on an Web Site to use an external,
governative, database.
When an authorized user attempt to access to this web
database he need to download (from the web site) on his
client an "IBM Host On Demand" file and he need to execute
it.
But at this point the procedure is stopped because he
don't have administrative privileges to install the
program!
The problem is the same even if Administrator install for
the first time on the client the "IBM Host On Demand" file
because on the next access of the user (whitout
administrative privileges) the web site ask him to install
again the software!
My question is: in which manner i can resolve problem
whitout join all domain user to an administrator group
(i.e. Domain Administrator)?
Is there a special group in Acive Directory that allow
user to install program on their client machines whitout
have full administrative rights on all domain.
Thanks You.
Cosimo MERCURO

 

[Paul McGuire]

you put the user in the local administrators group on the clients computer.
right click on my computer and choose manage. Then local users/groups
double click on groups and administators group and add the user to the
group.

HTH

Paul McGuire

 

[Stevta [MSFT]]

You might try power users group.
This will probably not help either.
To tshoot just one application you might use
www.sysinternals.com Both the regmon and filemon
utilities.
These apps will trace the local action the application
takes when it attempts to install. Give the normal users
access to create registry setting in this specific area
or access to create files in specific folders. The error
you are looking for is "access denied". The only problem
with this method is that its a multistep problem as you
fix the first error it moves to the second failurew and
so on until you have caught them all.
Be nice if you could contact the vendor of this app and
see if they will tell you what permissions are required.