Questions

user vs admin permissions

+
0 Votes
Locked

user vs admin permissions

pelican
If we push a group policy to disable user installs will this prohibit the administrators from doing installs. I have heard that the admins must be removed from the all users group
+
0 Votes
mamies
Collapse -

As long as the administrator is a member of the administrator group and the user is not then the user should not have admin privlidges while the administrator should. Dont quote me tho.

+
0 Votes
JMIRTC
Collapse -

If Network Admin account is locked out of installs then I guess you could still install software using the Local Admin account on the PC.

I dont think it will effect the Administrator account as it is a High Level account...

Maybe text it on a Sub Container first.
The last thing you want is it to lock out the Admin Account on a Server as they need to Write to places that a normal user can not.

+
0 Votes
bryanmuts2000
Collapse -

I think that if the Admin is in the same group policy then the admin rights will be removed.

1. The best way is to create a sub unit, create a group policy specifically for that sub unit and then restrict the install rights for that sub unit. move or create the restricted users in the sub unit.

2. The other option as previously suggested would be to install using the local Administrator profile, but then again this requires you to know the passwords for all the local profiles on all the PC's.

safe bet is option 1.