How to allow non-admin users in a Windows domain to install a specific application

active-directorywindows-server-2008

I have a Windows 2008 domain with Vista workstations.

I don't want users to have admin rights on their machines, but I want to allow them to install a specific company application.

This application is signed.

Best Answer

I would suggest that group policy would be perfect for this - the software is installed at logon (usually invisibly) and the users need no additional rights at all.

This link at Microsoft gives an overview.

Related Solutions

Windows – Allow users to install applications on Vista workstations controlled by Active Directory

You only need to make them Local Administrators (on their workstations) not Domain Administrators

For a script, see How Can I Add a Domain User to a Local Administrators Group?

strComputer = "PCName"
Set objGroup = GetObject("WinNT://" & strComputer & "/Administrators")
Set objUser = GetObject("WinNT://MyDomain/MyUser")
objGroup.Add(objUser.ADsPath)

Installing a CA certificate on multiple Windows machines (IE/Firefox)

Your best bet is to deply your root certificate to the machines using group policy. This article here explains the process in good detail.

Best Answer

Related Solutions

Windows – Allow users to install applications on Vista workstations controlled by Active Directory

Installing a CA certificate on multiple Windows machines (IE/Firefox)

Related Topic