Re: [ActiveDir] Installing Files

[Richard Sumilang]

Shouldn't they be able to install files using their AD account rather 
than having 2 accounts?

On Wednesday, July 30, 2003, at 01:52  PM, Free, Bob wrote:

The user should only be able to install files on the workstation they
are logged in to
Put them in the Power users group **on the workstation they
are logged in to**


-----Original Message-----
From: Richard Sumilang [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 30, 2003 10:52 AM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Installing Files
The user should only be able to install files on the workstation they
are logged in to, not a server. I am using Windows 2000 server with
Active Directory Users and Groups and don't see a group called "Power
Users". Just to clarify a little more, the user is like every other
general user on the network, they cant manage users, policies, etc, but
they can install programs on their own computer.
On Tuesday, July 29, 2003, at 08:16  PM, Rick Kingslan wrote:

Richard,

Install files....where?  On a member server or workstation, it's going

to be
Power Users unless it requires specific Administrational level
privileges,
then local admin is about your only choice.
If it's not a member server, it must be a DC.  In that case, Server
Operator
or Domain Admin is about the only choice - and I'd cut off an arm
first.
I'm with Roger and Joe on this one, and we've been pretty steadfast
and
direct.  Anyone that has more than just general permissions on a DC
that is
not a trusted administrator is like a fox in the hen house.  It's not
a good
situation to be in because there is just too great a risk to take on.
Rick Kingslan  MCSE, MCSA, MCT
Microsoft MVP - Active Directory
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard
Sumilang
Sent: Tuesday, July 29, 2003 6:51 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Installing Files
What group does a user need to be in in order to install program on
their
computer in active directory? I don't want the user to be an
administrator,
it's just Ok if they install files.
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: 
http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/