I would like to grant users using GPO to self manage and install selected software (flash, skype, Java) but not granting users admin rights. I've looked up software restriction policies, is it the right direction?
or are there other alternatives.
I know I can manage installs from AD, software installation, but I not want to be the one pushing and updating from server side.
setup:
AD – windows 2008 R2
users – Win XP and win 7
Best Answer
The issue is not whether or not you want users to have admin rights, but whether or not the software installer needs/asks for admin rights when run, which it will do if the app being installed makes system changes.
About the only way I can think of coming close to delivering what you want is something like the SCCM application catalogue. And even with that, you'll have to be managing the publication of 'approved' packages for install, I'm afraid.