Allan,
I am not sure what you mean. If you want all of your domain users to be
able to install software on their local computers then there might be a
couple of solutions. One might be to make the domain user account object a
member of the local computer's Power User group. This will allow that user
to install some software - but not all. The reason is that this local
security group has limited access to some directories and registry keys.
Another solution ( and I generally do not recommend this at all ) would be
to make the domain user account object a member of the local computer's
Administrator group. Be very careful with this as that user will have
complete access to everything on the computer. And by everything I mean
absolutely everything. Another solution is to use GPO to install software.
This would be the best solution. There is also something in WIN2003 whereby
you can allow only certain applications to be installed ( as I have not done
much with WIN2003 please excuse my ignorance - I do not remember if this
'list' is a list allowing only those apps on it to be installed or if this
'list' is a list allowing everything but those apps on it to be installed ).
That would be a GPO that you could configure.
Also, please remember that GPOs apply only to WIN2000 and WINXP clients.
HTH,
Cary
