User permissions for installing software 2

[smitty691]

I am setting up a domain network in an office of approximately 10 users. I don't want to leave all the office workers on domain admin priviledge but the owner wants them to be able to install software on their particular machines. What is the best way to allow them to be able to install software without giving them domain admin status? Thanks for your time.

 

[porkchopexpress]

Make them administrators on the local workstation, i would avoid giving them domain admin rights at any cost you're asking for a disaster.

http://nic.phys.ethz.ch/readme/71

 

[JJDiver]

Give a user admin rights on a machine, hope you install antispyware and antivirus on the machines, they are kept up to date automagically, and the lusers, errrr local machine admins know something about how to surf safe.

I wonder how often you will need to wipe the machines...

Good luck,

Jeff

 

[porkchopexpress]

You could also create a local admin account that they should only use for installing and then 'instruct' them that they will use their ordinary user account for general work especially internet browsing. You could audit this as well to check how often they use that account.

 

[smitty691]

Thanks so much to both of you for your speedy replies. Here's the rub -- the owner says that this solution is unacceptable because they have to log into the local machine. I need an answer that will allow them to acquire the permission to load software from the server when they log in on the network. And I hear you about the spyware/virus exposure. I'm sure all the 'free screensavers' out there are gonna cause me to get plenty of phone calls. But, as I keep telling myself, it's his checkbook. Thanks again for the help and if you have any additional ideas, I welcome them.

 

[Larsdemo]

make them use run as (rightclick run as) and let them use a administrator account for installing software, this way they can install the software while logedin as normal user.

Regards Lars

Network admin for worldwide freight forwarders company.
mcp mcsa\: Messaging mcse -2003

 

[Empmark]

When you go to:
Control Panel, User Accounts and then add a user, you also are prompted for the domain. Then give them local administrator rights and they can install software while logged into the domain.

This may be obvious, but they also need the correct permissions to the shared folder with the software.

I agree with the other posters. Please do not give them domain admin rights. With local admin rights they can do anything (install software, printers, all other good and bad things) on the local machine while logged into the domain.

Good luck...
Mark