Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have domain environment and we have IT support team , I want to delegate installation rights to specific group (that particular group must have installation rights to all computers which is the part of domain). Thanks in Advance Vinay Kumar Vishwakarma

share|improve this question

closed as off topic by Canadian Luke, Renan, 8088, Not Kyle stop stalking me, random Jul 27 '12 at 3:07

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

Domain Admins is added to the local administrators group on all machines joined to the domain. Add them to that.

share|improve this answer

If you don't want to add the IT support team to Domain Admins, create a new group for them and use Group Policy to add that group to the Administrators group on the local machines.

If the contents of the Administrators group on the clients can be tightly controlled, you can use the Restricted Groups policy item. Otherwise, configure a startup script:

net localgroup Administrators /add it-support-team
share|improve this answer
I think we need to create a security group "IT_SUPPORT" and add all IT support users to that group. And add the below following lines in the script - ifmember "IT_SUPPORT" if not errorlevel 1 goto itsupport net localgroup administrators %username% /add :itsupport – user128364 Jul 27 '12 at 2:37
The net localgroup command won't do any harm if the group is already a member of Administrators, so testing first is a waste of time IMO. The %username% has nothing to do with it and definitely shouldn't be in the command. Also, note that since you only need to issue a single command, you don't need an actual script. – Harry Johnston Jul 27 '12 at 4:27

Not the answer you're looking for? Browse other questions tagged .