Win2K and Domain Admin rights

[vonatlas00]

We have to many domain admins, and I would like to get rid of some of them. The problem is one of our departments need the domain admin rights to install programs. How can I make it so they can still install the software but not be domain admins? Please any help would be apprecited.

[Sean Stecker]

Create a Global group named IT Staff, or someother, and make it a member of the Local Admins group on your workstations. Put whoever needs the rights to install software in this group. Problem solved.

You may be able to get away with Power Users, but this depends on the software. Much of the software on today's market needs admin rights under Win2K just to run, let alone install.

Kudos to you for taking the action to remedy this situation. Domain Admin is God. Definitely way too high of priveleges in order to simply install software. You should never have more than 2-3 in an environment with less than 2,000 users.

Sean
www.swynk.com/friends/stecker


------------
vonatlas00 at 1/15/01 1:05:15 PM

We have to many domain admins, and I would like to get rid of some of them. The problem is one of our departments need the domain admin rights to install programs. How can I make it so they can still install the software but not be domain admins? Please any help would be apprecited.