GPO Query


dear all,

i have 1 query regarding gpo, have 2k3 native domain structure in our organization, have restricted users add in local admin through gpo, no body can’t install s/w in pc.

but s/w team require right install software on machines , want give right without provided local admin right through gpo. wants right on single id install software on machines , nothing else.

right have added id local admin through gpo , doing task without issue, want maintain compliance also.

so please suggest me alternate way. without giving local admin right, able install software on domain machines , can’t on machines

regards

manjeet singh

hi manjeet,

thanks posting in microsoft technet forums.

i don't think can use gpo grant users permission install software  without giving them local administrative right.

here thread reference:

how give full permission software users through group policy

http://social.technet.microsoft.com/forums/en-us/winservergp/thread/d7ce2d51-2506-4b42-b566-25477a6aaa66

in meantime, suggest read article below see if can helpful in situation:

best practice: how use group policy preferences secure local administrator groups

http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/

regards

kevin

 


technet community support



Windows Server  >  Group Policy



Comments

Popular posts from this blog

directory stack

After enabling Windows Server 2012 R2 DHCP Failover Getting Packet dropped because of Client ID hash mismatch

WMI Repository 4GB limit - Win 2003 Ent Question