Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 1 down vote favorite

Can anybody recommend me an active directory management tool that allow delegate admin rights to nonadmin users; I need non admin users to;

  • install "allowed" software to "allowed" paths (via hash)
  • install "allowed" drivers,
  • run "allowed programs" "as admin"

thanks.

share|improve this question
I have never really played with it much (short of giving certain groups the ability to do password resets) but AD has the built in ability for certain privs to be delegated out to non admin users. Maybe installing software is listed in there – Steve Oct 5 '12 at 9:52
I know; neither it is in my profession; I believe AD is lacking the ability to check hash values of the installation files; any other ideas? – x0r Oct 5 '12 at 11:12
I know you can stop application x from running if the hash doesnt match. But im afraid im all outa ideas. – Steve Oct 5 '12 at 12:44
Which version of Windows are your clients running? – SturdyErde Oct 6 '12 at 23:15
While I don't think you intended for it to be, your question seems like a shopping question when it is actually a permissions question. You should update/change it to properly reflect your desired result. – Brent Pabst Oct 9 '12 at 13:26

closed as not constructive by Brent Pabst, MDMarra, Ward, Adrian, rnxrx Oct 11 '12 at 4:42

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.

1 Answer

up vote 0 down vote

I think you are over thinking this problem. If you want specific users to be able to perform certain tasks then setup specific security groups with the proper permissions they will need. You can create security groups for pretty much anything and can apply them at all of the different levels of a directory hierarchy:

  • Forest
    • Domain
      • Local Computer
share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.