Windows – Allow users to install applications on Vista workstations controlled by Active Directory

active-directorywindowswindows-server-2008

I have a network with windows server 2008, Active directory and Vista workstations. I need to allow users to install applications and fonts when they need to (don't worry they are all trustworthy folks 🙂 but I do not want to make them domain administrators.

How can I do this with AD?

Many thanks

Richard

Best Answer

You only need to make them Local Administrators (on their workstations) not Domain Administrators

For a script, see How Can I Add a Domain User to a Local Administrators Group?

strComputer = "PCName"
Set objGroup = GetObject("WinNT://" & strComputer & "/Administrators")
Set objUser = GetObject("WinNT://MyDomain/MyUser")
objGroup.Add(objUser.ADsPath)
Related Topic