Tell me more ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.
up vote 0 down vote favorite

We have domain environment and we have IT support team , I want to delegate installation rights to specific group (that particular group must have installation rights to all computers which is the part of domain). Thanks in Advance Vinay Kumar Vishwakarma

share|improve this question

closed as off topic by Luke, Renan, 8088, Kyle, random♦ Jul 27 '12 at 3:07

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.

2 Answers

up vote 1 down vote

Domain Admins is added to the local administrators group on all machines joined to the domain. Add them to that.

share|improve this answer
up vote 0 down vote

If you don't want to add the IT support team to Domain Admins, create a new group for them and use Group Policy to add that group to the Administrators group on the local machines.

If the contents of the Administrators group on the clients can be tightly controlled, you can use the Restricted Groups policy item. Otherwise, configure a startup script:

net localgroup Administrators /add it-support-team
share|improve this answer
I think we need to create a security group "IT_SUPPORT" and add all IT support users to that group. And add the below following lines in the script - ifmember "IT_SUPPORT" if not errorlevel 1 goto itsupport net localgroup administrators %username% /add :itsupport – user128364 Jul 27 '12 at 2:37
The net localgroup command won't do any harm if the group is already a member of Administrators, so testing first is a waste of time IMO. The %username% has nothing to do with it and definitely shouldn't be in the command. Also, note that since you only need to issue a single command, you don't need an actual script. – Harry Johnston Jul 27 '12 at 4:27

Not the answer you're looking for? Browse other questions tagged or ask your own question.