The user should only be able to install files on the workstation they are logged in to, not a server. I am using Windows 2000 server with Active Directory Users and Groups and don't see a group called "Power Users". Just to clarify a little more, the user is like every other general user on the network, they cant manage users, policies, etc, but they can install programs on their own computer.

On Tuesday, July 29, 2003, at 08:16 PM, Rick Kingslan wrote:

Richard,

Install files....where? On a member server or workstation, it's going to be
Power Users unless it requires specific Administrational level privileges,
then local admin is about your only choice.


If it's not a member server, it must be a DC. In that case, Server Operator
or Domain Admin is about the only choice - and I'd cut off an arm first.
I'm with Roger and Joe on this one, and we've been pretty steadfast and
direct. Anyone that has more than just general permissions on a DC that is
not a trusted administrator is like a fox in the hen house. It's not a good
situation to be in because there is just too great a risk to take on.


Rick Kingslan  MCSE, MCSA, MCT
Microsoft MVP - Active Directory
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Sumilang
Sent: Tuesday, July 29, 2003 6:51 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Installing Files


What group does a user need to be in in order to install program on their
computer in active directory? I don't want the user to be an administrator,
it's just Ok if they install files.


List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/




List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to