none
What type of User Account in Active Directory 2010

    Question

  • Hi

    What kind of user account should a user have to maintain and install programs on all the computers connected to that domain.

    I have searched but haven't found anything about it.

    SP thanks for the help. 

    Thursday, January 26, 2017 8:43 AM

Answers

  • Hi

    What kind of user account should a user have to maintain and install programs on all the computers connected to that domain.

    I have searched but haven't found anything about it.

    SP thanks for the help. 

    Local Admins.

    By default, normal users are not part of any groups, so if you want them to install applications on their computers they must be local admins.


    Mahdi Tehrani   |     |   www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.

    Thursday, January 26, 2017 3:58 PM
    Moderator

All replies

  • Hi

     Basicly;

     Domain Admins,Enterprise admins,schema admins,local admins,delegated users (if have install software right). have administrative rights on computers like install software,etc..

    Also check the article for "Active Directory Security Groups"

    https://technet.microsoft.com/en-us/library/dn579255(v=ws.11).aspx


    This posting is provided AS IS with no warranties or guarantees,and confers no rights. Best regards Burak Uğur

    Thursday, January 26, 2017 3:20 PM
  • Hi

    What kind of user account should a user have to maintain and install programs on all the computers connected to that domain.

    I have searched but haven't found anything about it.

    SP thanks for the help. 

    Local Admins.

    By default, normal users are not part of any groups, so if you want them to install applications on their computers they must be local admins.


    Mahdi Tehrani   |     |   www.mahditehrani.ir
    Please click on Propose As Answer or to mark this post as and helpful for other people.
    This posting is provided AS-IS with no warranties, and confers no rights.

    Thursday, January 26, 2017 3:58 PM
    Moderator
  • Hi,

    As mentioned above, to give a user to install a program, you need give the user with local administrator permission.

    It is not recommended to give the user with domain administrator permission.

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, January 26, 2017 4:03 PM
    Moderator
  • Hi,

    Are there any updates?

    If the reply above has resolved your problem, please mark it as answer as it would be helpful to anyone who encounters the similar issue.

    Thank you.

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, February 2, 2017 12:09 PM
    Moderator
  • I would create a domain security group for this purpose, the use the Restricted Groups feature of Group Policy to make this new group a member of the local Administrators group on all computers joined to the domain. Then make the user or users members of this new group. This way, you can manage who is local Administrator on the computers simply by managing the membership of this new domain security group.

    Richard Mueller - MVP Enterprise Mobility (Identity and Access)

    Thursday, February 2, 2017 12:59 PM