Hi All,This is my first post and it is probably a stupid question entirely! Is it possible to delegate permission to a group to install software on a Windows 2003domain controller? We have a group of users that need to be able to install software, but not do anything else!Or isthere a built in group (other thanDomain Admins/Administrators - they are currently a member of Administrators which is less than ideal!) that can achieve this?Any advice gratefully received!!Hales

Hi,On which computers do you would like the user to have right to install software? If they are Domain Controller, there is no built-in group to meet your requirement. Its also not recommended to give non-administrator users rights to install software on DC. However, you can delegate necessary right to user if you need them modify specific Domain data. If the computers are normal member computers, you should add those user to computers local administrator. For your reference:If you would like to delegate Domain rights, I suggest you read through the following articles to get more detailed information about AD Delegation. The detailed delegation implementation depends on your plan, AD infrastructure and resources.Best Practices for Delegating Active Directory Administrationhttp://download.microsoft.com/download/7/b/6/7b674ccf-cf69-4b2b-b8f7-3164cec5d5e5/Active_Directory_Delegation.docBest Practices for Delegating Active Directory Administration Appendiceshttp://download.microsoft.com/download/d/3/b/d3bcf701-ba3a-4bae-a79b-fad180776702/Active_Directory_Delegation_Appendices.docThanks.