Installing software w/o admin group membership

[ping]

Archived from groups: microsoft.public.win2000.security (More info?)

Is there anyway that I can use the Delegation and Control wizard to have my
Helpdesk personnel install and modify software on computers?

We don't want to put them in the Admins group, but we still want them to
modify and setup software on pcs.

Or is there another way to give these rights?
Thanks.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

In general, all software considered, admin is required for this.
Some software does install as a plain user of course, but one
really does not know what an install might attempt to do, and
a number of common actions are admin only types of things.

If you have active directory, consider wrappering the software
as msi installs (if necessary) and advertising them through
group policy. If you have the Windows Installer service
allowed to use elevated privileges, these msi based installs
will be able to complete when triggered by a plain user.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Ping" <Ping@discussions.microsoft.com> wrote in message
news:E31E59EC-7330-4533-B61D-E178937073F4@microsoft.com...
> Is there anyway that I can use the Delegation and Control wizard to have
my
> Helpdesk personnel install and modify software on computers?
>
> We don't want to put them in the Admins group, but we still want them to
> modify and setup software on pcs.
>
> Or is there another way to give these rights?
> Thanks.