NT Permission question

[dachang]

Hello,<br>
I have a network of NT servers 4.0 and NT Workstations 4.0. I have noticed that users do not have the right to install any software on their workstations without having the administrator AND the domain admin rights. Is there a way for me to set up a special group with rights that give the members the ability to install software on their workstations, but not have administrative rights? Thanks for your advice. <p>D. Chang<br><a href=mailto:dkc@llsi.com>dkc@llsi.com</a><br><a href= > </a><br>

 

[dragonpath]

is the built in power user group too powerful for you?

 

[MasterRacker]

If your user's domain ID is a member of the machine's Administrator (or Power User) group that should do it for you. They should not need any sort of domain administration privledges. If you're installing over the network, then obviously they need read permission to the shared folder or CD the software is coming from. That should be it. <p> Jeff<br><a href=mailto: masterracker@hotmail.com> masterracker@hotmail.com</a><br><a href= > </a><br>

 

[dachang]

Jeff,<br>
I already tried to give them local admin rights. They were still unable to install software unless they have global network admin rights.<br>
<br>
Dragonpath: I will look into trying to make them Power Users to see if it works. <p>D. Chang<br><a href=mailto:dkc@llsi.com>dkc@llsi.com</a><br><a href= > </a><br>

 

[pmkincaid]

When you set them up as local admins, how did you do it? I have seen in the past, just by simply adding their name within User Manager on the local machine, sometimes, for some reason doesn't work.<br>
<br>
Go into User Manager on the local machine and add their user from the domain (ie, it will show up on the machine as DOMAIN/username, rather than just user name).<br>
<br>
Setting them up as admins of their local machines is only dangerous to that local machine - although not too dangerous. Just make sure if more than one person uses the machine they save all sensitive data to the network rather than the local machine - which they should do anyway...<br>
<br>
Hope this helps,<br>
Paul