Hi Gurus,
I have been spending so many hours and even keeping me up at night about this issue.
I read so many guides, CBT and still I cannot fix the issue :(. I have tried so many different things but no luck. Sometimes I feel I’m chasing my own tail.
My last DC hands on was 5 years ago with Win2k3. I am using Windows 2012 AD now.
Objectives:
1. To create Users Domain account with limited user rights only w/out access to administrator rights (domain/local), cannot install any software, change computer configurations and cannot add local administrator account.
2. Domain account with Local Admin Account rights who has access to install software to workstations only and doesn’t have domain admin rights.
3. (additional) what is the easy way to give limited account temporary admin rights to install or configure workstations? Hypothetically - dragging the user account to admin group if needed then return to user group after software installation.
How to do the above in Windows 2012 Domain Controller?
Thank you very much and more power to Spiceworks.