On my active directory network, I want to satisfy my boss by giving him semi-administrative permissions that will allow him to Install programs as administrator in emergency situations on all computers, but not sacrifice the integrity of the network. Is there any type of Admin Group setting or Group that I could create that would allow him basic user permissions + the ability to install programs/drivers as administrator? I don't want to give him Domain Admin or anything crazy, just bypass UAC. I was going to give him permission to bypass UAC via GPO, but would I need to make an entire GPO just for him? Is that too much?
asked May 8, 2014 at 19:46
289 5 5 gold badges 7 7 silver badges 24 24 bronze badges
You can allow normal users to install drivers, and put the drivers in a share where every PC can retrieve them. See technet.microsoft.com/en-us/library/cc725772.aspx or see Computer Configuration, Administrative Templates, System, Driver Installation in GPO.
Commented May 8, 2014 at 20:20