none
Group Policy to Give Limited Access right to Domain Users

    Question

  • How to give domain user - some admin right to install software / change ip address restart services.


    Regards, Ravi Kumar

    Monday, April 24, 2017 5:40 AM

All replies

  • Hi,
    As far as I know, admin privilege is needed in order to do these tasks.
    In this case, you could add domain users into local admin group, and this operation could be done by using restricted groups via group policy:
    Active Directory Group Policy Restricted Groups
    https://social.technet.microsoft.com/wiki/contents/articles/20402.active-directory-group-policy-restricted-groups.aspx
    Best regards, 
    Wendy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, April 28, 2017 12:23 PM
    Moderator
  • Being member of local administrator is required.

    You can use restricted groups GPOs to perform that: https://social.technet.microsoft.com/wiki/contents/articles/20402.active-directory-group-policy-restricted-groups.aspx


    This posting is provided AS IS with no warranties or guarantees , and confers no rights.

    Ahmed MALEK

    My Website Link

    My Linkedin Profile

    My MVP Profile

    Saturday, April 29, 2017 12:23 PM
  • Hi Ravi,

    I am checking how the issue is going, if you still have any questions, please feel free to contact us.

    And if the replies as above are helpful, we would appreciate you to mark them as answers, and if you resolve it using your own solution, please share your experience and solution here. It will be greatly helpful to others who have the same question.

    Appreciate for your feedback.
    Best regards,

    Wendy


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, May 5, 2017 12:25 PM
    Moderator