Delegate Permission to user to install softwares on any computer on the domain
Hello, I want to grant one of the help-desk staff a permission allow him to install software on in machine on the domain , In Delegate control in A.D there is no option like this . How can I accomplish this please Regards
June 7th, 2012 3:32am

Unless you have a deployment tool such as SCCM in which you could grants him permissions to assign software to a computer you would have to grants the helpdesk staff local administrative rights on each computer where it is applicable. This can be done via Group Policy. Jaap Brasser http://www.jaapbrasser.com
Free Windows Admin Tool Kit Click here and download it now
June 7th, 2012 3:35am

thanks , can you tell me how to create local admin user on all the machine with fixed password using Group Policy ?
June 7th, 2012 3:43am

Using Fixed password is not a good practice. However, technically its possible to create a service account and mark that account not have password expires. create a group and add the service account and use restricted group feature available in Group Policy to make that administrator on desired machines. Restricted group policy need to applied on a OU which has machine accounts.Thanks, Being Human
Free Windows Admin Tool Kit Click here and download it now
June 7th, 2012 6:24am

There's two things you could do, you could create a local user account with local administrator permissions or you could add an AD group into the local administrators group. I would recommend you do the latter, here is how to do that using group policy: To create a new Local Group preference item Open the Group Policy Management Console. Right-click the Group Policy object (GPO) that should contain the new preference item, and then click Edit. In the console tree under Computer Configuration or User Configuration, expand the Preferences folder, and then expand the Control Panel Settings folder. Right-click the Local Users and Groups node, point to New, and select Local Group. In the New Local Group Properties dialog box, select an Action for Group Policy to perform. (For more information, see "Actions" in this topic.) Enter local group settings for Group Policy to configure or remove. (For more information, see "Local group settings" in this topic.) Click the Common tab, configure any options, and then type your comments in the Description box. (For more information, see Configure Common Options.) Click OK. The new preference item appears in the details pane. http://technet.microsoft.com/en-us/library/cc732525.aspxJaap Brasser http://www.jaapbrasser.com
June 7th, 2012 6:31am

Using Fixed password is not a good practice. However, technically its possible to create a service account and mark that account not have password expires. create a group and add the service account and use restricted group feature available in Group Policy to make that administrator on desired machines. Restricted group policy need to applied on a OU which has machine accounts.Thanks, Being Human
Free Windows Admin Tool Kit Click here and download it now
June 7th, 2012 6:32am

There's two things you could do, you could create a local user account with local administrator permissions or you could add an AD group into the local administrators group. I would recommend you do the latter, here is how to do that using group policy: To create a new Local Group preference item Open the Group Policy Management Console. Right-click the Group Policy object (GPO) that should contain the new preference item, and then click Edit. In the console tree under Computer Configuration or User Configuration, expand the Preferences folder, and then expand the Control Panel Settings folder. Right-click the Local Users and Groups node, point to New, and select Local Group. In the New Local Group Properties dialog box, select an Action for Group Policy to perform. (For more information, see "Actions" in this topic.) Enter local group settings for Group Policy to configure or remove. (For more information, see "Local group settings" in this topic.) Click the Common tab, configure any options, and then type your comments in the Description box. (For more information, see Configure Common Options.) Click OK. The new preference item appears in the details pane. http://technet.microsoft.com/en-us/library/cc732525.aspxJaap Brasser http://www.jaapbrasser.com
June 7th, 2012 6:39am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics