Question

Active directory account

We are trying to create an account in Active Directory that does not have login privileges, but DOES have rights to install programs when a user is logged in. Is this possible?
Trying to set up an account for a student help desk at a school, and we do not want to give too much access, but ability to install programs and update drivers.

Discussion is locked
Follow
Reply to: Active directory account
PLEASE NOTE: Do not post advertisements, offensive materials, profanity, or personal attacks. Please remember to be considerate of other members. If you are new to the CNET Forums, please read our CNET Forums FAQ. All submitted content is subject to our Terms of Use.
Reporting: Active directory account
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Comments
- Collapse -
Answer
Conflicting requirement.

You state no login then tell about a login. That's not clear. As rights go, install rights pretty much give away the keys to the PC's kingdom so I don't see how this could be considered secure.

- Collapse -
Hopefully more clear

I understand, and I am sorry it wasn't more clear.
Everyone at the school has an account in AD. We set up a Student help desk to be able to take some pressure off our small department. We are trying to brainstorm a way to be able to do this:
When the person who is logged into the computer is trying to install a program, a security warning pops up asking for admin rights. We are looking for an account to use for this specific purpose, but not be able to log into the computer it self, just elevate privileges when in use.
Does that make more sense? Like I said, we are trying to brainstorm ideas, so any help would be greatly appreciated.
Thank you!!

- Collapse -
This is how security is breached.

The rootkit or ransomware would have a clear path into the PC. The number of times they need to install should drop fast after the first week. And again, you must maintain control.

Post was last edited on October 5, 2017 10:07 PM PDT

CNET Forums