Domain – Local Administrator cannot install software on domain member server

domainwindows-server-2012

We've got a new 2012 Server that a company needs to remotely install software on. Their user is a local administrator but cannot install software to the server. I'd rather not give them domain admin access.

The local administrator account is able to do so without problems. I'm trying to figure out what is preventing the installation. It specifically complains that there's no access to C:\Program Files, however the permissions are identical.

gpresult /v shows that the Local Administrator has some "Security Privileges" that the user account doesn't, however the local security policies show those rights explicitly assigned to the local admin group but they don't show in gpresult for their user.

It seems as though I'm missing some fundamental knowledge here.

Thanks for your advice.

Best Answer

I blame UAC!

In a default install, the local admin account is exempt from UAC elevation requirements, while administrator accounts via group membership aren't.

Try launching the installer with admin permissions

runas

or temporarily disable UAC on the system completely, and see if that helps.

Related Topic