If anyone can offer any advice to an issue we have I would be most gratefull.
We are mid way through a Windows 2000 deployment. We have a number of domain controllers and member servers distributed through out Europe and the Middle East. Security wise we delegate control of AD object for administrators within each country and for member server we add them to the local administrators group, AD wise we also add them into the server operators group. The problem we have is with regards to software/patch installaton on domain controllers in that they cannot perform the action because they are not administrators over domain controllers (as they are not domain administrators). It is fine on member servers as they are members of the local admin group (DC's dont have such a concept). For obvious reasons we do not want to add them to the domain admins group, however we do want them to be able to install their own software and obviously install patches as and when they become available. We have already given privileges for MSI packages, however as most software (including hotfixes) does not use the MSI format they cannot install them. Has anybody else come across this issue, or know of any resolutions? Many thanks, Jason ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
