0

I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator? Windows server 2008

Tobias Karlsen
  • 35
  • 1
  • 4

1 Answers1

0

The UAC prompt can only be approved and grant administrative rights to a user that is a member of the local Administrators group. You can easily set domain accounts - or even domain groups - as member of the local administrators group. This can be done directly or via policy.

Also note that some UAC prompts actually don't need full administrative credentials - a standard user can provide their own and have a lot of software packages still install, just in a per user mode.

Tim Brigham
  • 15,545
  • 10
  • 75
  • 115
  • I just want them to be able to install softwares and change some certain setting i think Administrator group has too much access to stuff. @TimBrigham – Tobias Karlsen Sep 04 '15 at 17:29