hi guys, i had tried creating a "domain admin" user account. My purpose was to use this account to install some third party applications on a domain workstation. But when i tried to use the account it cannot install the application. I need to use the administrator account to install. How to set an account in a domain environment to install applications instead of using the administrator account? Thanks.

add the domain user to the local administrators group and try.http://www.virmansec.com/blogs/skhairuddin

Hello, to be able to install applications, you have to make it a local admin. If you have multiple computers on which you want to perform that, you can use Restricted groups policy via group policies. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator

Hello, if you create a user account in AD UC and make it member of the domain admins security group, it is by default automatically added to the local administrators group. So maybe you have configured Restricted groups or use GPP to define yourself who is member of local administrators group. To check please run rsop.msc and query the output for settings belonging to this.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Thank you guys, i added the account to the restricted group and it works. :)