Group Policy to allow specific users to install specific software without admin privileges
I am a newly system administrator for an organization and I am trying to create a Group Policy that will allow specific users to download and use certain software like LogMeIn123 without having to use admin privileges. We don't want to give full admin rights, but only for this specific instance. I have done some research, but I am not sure the best way to set this up. The problem is our IT team consists of 3 members total and cannot be everywhere at once and this would be beneficial in key times. I have seen some people recommend using a login script, but I am not sure how to do that. I have also seen some people recommend using a third-party tool which is out of the questions for our organization. I am also open to other ways and ideas of having preforming this. Can anyone please provide me with some instructions on how to set this up? Thanks in advance for your help! Additional information: I am using Windows Server 2012R2. I have a list of the specific users that I want to allow to install LogMeIn123. I have the LogMeIn123 installation file located on a network server.Windows Admin Center needs a Group Policy Extension for GPMC
That's one of the important things that is missing in WAC 1907. even if not as part of the main features, make it available as an extension to optionally install it whoever needs it. Then, Microsoft can expect people to move from RSAT to the new WAC.
Admin account Lockout
Hi All - I have been asked to implement password chages ppoicy at a site we support. During this process I also setup account lockout policy after 5 invalid attempts The option Allow Administrator Account lockout was enabled and now when trying to login I have the message - The referenced account is currently locked out and may not be logged onto. We have only used the correct password to logon - but this still has happened and waiting 30mins does not sort this issue. Also, I have no other Administrator account for this Domain Server. Does anyone have any suggestions on dealing with this ? The Policy has the following settings - Account Lockout Duration 30mins Account Lockout Threshold 5 Invalid logon attemps Allow Administrator Lockout Enabled Reset Account loclout Counter after 30mins
Configure RPC packet level privacy setting for incoming connections not show in group policy
Hi, it's about the group policy setting in windows server 2022, I have downloaded Windows Server 2022 Security Baseline.zip from https://www.microsoft.com/en-us/download/details.aspx?id=55319 Microsoft Security Compliance Toolkit 1.0 and imported SecGuide.adml and SecGuide.admx. I can see the MS Security Guide folder in local group policy editor, but there is no setting for "Configure RPC packet level privacy setting for incoming connections", I also try to find from All Settings, there is no such setting. Could you advice how to config it to let it show in the group policy editor or GPO. Thanks.
Group policy to allow non Admins to change IP to static
How can I allow non Admins to change their IP to static/DHCP (for connection to PLCs) without granting them full Admin rights? I can't find the setting in the Group Policy Management Editor. Server is 2012 R2. Ideally done with a group policy, other ways are okay too. Thanks in advance. Edit: their local device IP only if that wasn't clear
