RE: [ActiveDir]

[Creamer, Mark]

Not sure of the circumstances, but given your desktops are 2K/XP, can the installations be done over the LAN? You can do that in AD, which will install with elevated privileges. Alternatively, you could use a product like Script Logic, which can do installs, although they’ll tell you it’s not really designed for that ;-)   These solutions obviously aren’t viable if you have slow links, but at LAN speed no problem.   If this is a trusted user, and it’s a short-term solution, maybe you shouldn’t be so quick to discount giving the user domain admin rights. You can always remove it afterwards…   <mc> -----Original Message----- From: Douglas M. Long [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2003 10:32 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir]   I hope that last comment was a joke...as I wouldnt want a "user" to have domain admin rights. If you find a good solution for this, I would be suprised, as I have looked for a better solution than just adding the users domain account to the local admin group and cant find anything. I have been living with all "domain users" being members of their local machine admin group, and just hoping that they dont change the local admin user password. If all you are worried about is keeping the admin password so that you can get into the machine if you need...dont worry, there are always local machine administrator reset programs.     -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Jerry Johnson Sent: Thursday, December 04, 2003 9:46 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Hi I have a user that needs to be able to install software on 2k and xp clients by visiting each desktop. All of our clients are setup with the same local admin password and do not want him to know that password. Is this possible? He is currently just a domain user. Thank you Jerry   Scicom Data Services Minnetonka,Mn