Administrator rights

[joeblough]

I am now wanting to delegate some responsibility to a new kid on our team. we are running NT server 4.0 and I only want him to be able to log on to NT workstations to load software. I do not want him to have access to any Server resources. which admin group accomidates me on this?

We are planning to upgrade the servers to Windows 2000, does this change the scenario?

I understand he can log in as a LOCAL admin, but there are no CD-ROM's on the machines and it would be too much of a hassle.

Thanks

 

[dxd]

Your issue may be two-fold. On one hand, he needs admin rights on the local boxes to perform the installs and on the other hand he needs sufficient rights to access these install sources.

You basically have two methods...adding him or a global users group(with appropriate rights) he is in to the local admin group on each box or adding him to the domain admin group and then specifically denying him access to those resources he can not use.

Software installs..at least InstallShield..specifically check for admin rights, so any other standard NT group will not work...at least in my experience. [sig]<p>Doug<br><a href=mailto:dxd_2000@yahoo.com>dxd_2000@yahoo.com</a><br><a href= > </a><br> [/sig]

 

[MasterRacker]

The first method Doug mentioned is the most common.

Create a global domain group called WorkstationAdmins and put the new guy's ID into that group. On each workstation add that group into the local Administrators group. [sig]<p> Jeff<br><a href=mailto: masterracker@hotmail.com> masterracker@hotmail.com</a><br><a href= > </a><br>If everything seems to be going well: you don't have enough information.......[/sig]