|
Home > Archive > 70-217 > October 2002 > Obvious question?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| r_f_t99 2002-10-27, 6:57 am |
| This is an obvious, dumb question:
I have a network with +300 users. One day, one of them, began complaining that he wanted to install an application in his pc. I dont want to install it myself, neither include him in the Domain Admins group nor local Administrators group. How can I give him the minimum permissions that will allow him to install the application in (and only in) his pc?  | |
| Adorik 2002-10-27, 7:51 am |
| hi,
i donno if i am right nor if it translates realy good. arenīt users in the computers main user group allowed to add applications?
in german the group is called "hauptbenutzer" | |
| r_f_t99 2002-10-27, 8:42 am |
| This is a real-world scenario, due to security reasons, my "haupt" user group has no permissions to install applications. I just want to grant those permission to that particular user without compromissing the security of the rest of the network nor creating a new security group for just that user (yes, the typical "with the least administrative effort")  | |
| Slinky 2002-10-27, 11:19 am |
| If the application doesn't modify any system settings like the registry then you can add him to the Power Users built in local group. More than likely the program will need to modify the system so that's out the window. Your other option is to hold down "Shift" on the setup file and select "Run as" and supply the credentials for an administrator. Or another possiblility would be to deploy the software in a package and assign only that user the read permissions to that GPO. You're best option would be the "Run as", that way when he wants to install it you just run over there, type in your password, and let him go from there. | |
| cm2gj 2002-10-28, 12:39 am |
| quote:
Originally posted by r_f_t99
This is an obvious, dumb question:
I have a network with +300 users. One day, one of them, began complaining that he wanted to install an application in his pc. I dont want to install it myself, neither include him in the Domain Admins group nor local Administrators group. How can I give him the minimum permissions that will allow him to install the application in (and only in) his pc?
add temporarily the domain user to the local admin users on their pcs. in this way you allow to install any application. after installation, kill the admin privilegies you provide.
for example
the pc of the user is pc1
the domain user is user300
you must add the user300 domain user to the local administrator group on pc1.
install the softawre into the user.
remove the domain user from the local admin group. | |
| me? I dunno... 2002-10-28, 6:01 pm |
| It seems odd that he is the only user out of over 300 that requires that particular resource?
Why not determine if the enterprise would benefit, if certain other users also had access to that resource, then create an OU, and publish accordingly? | |
| me? I dunno... 2002-10-29, 10:15 pm |
| That should have been "assign" required resources accordingly.
It is kind of a contradiction though, that they suggest to assign required resources, and publish non required resources? If the resource isn't required, why distribute it at all? |
|
|
|
|