AD Policy 2

[BHuckfield]

Does anyone know how to set up an AD policy (if it is possible) to allow installation of software from certain sites only? I have removed the user from the local admin group, and so installing software becomes impossible. However, we need to install Oracle JInitiator on demand from the web browser when they navigate to a certain site. Obviously now this will not work...is there a way to install with elevated privileges from certain zones or sites only?

thanks in advance.
Brian

 

[catchphrase]

Not too sure about the web-based install; but, you can push out software packages (.msi files) using group policies within AD. When you set up the installation package, one of the options is to install with elevated privileges.

 

[Seaspray0]

With group policy, you can publish software to the user and you can also configure the file extensions that will trigger automatic installation of the software. If your webpage attempts to open a file that contains an extension associated to the published software and the software installs with elevated priviledges, you shouldn't have too much of a problem.

In GP, look at user configuration, software settings, software installation.

A+/MCP/MCSE/MCDBA