I am curious is anyone can figure out this mind boggling problem with win2k. I am currently running win2k server as a domain controller with DNS/DHCP.

Situation: What I want to accomplish in my home network is the ability to install a program as a Domain Admin or a Domain User and have access to play the game as that user. The account I want to be able to play the games will only have access to play the games and do nothing else. I don't want them to be able to install additional programs or modify the system in any fashion w/o the domain admin allowing them.

Problem: Windows 2000 will only let a user install an application as a Domain Admin. If we install the game/application as domain admin and try to play it as the game user I want to setup Windows will ask the game user to re-install the applcation. But since this users rights need to be kept limited they can't go and install this program. Well I have also tried placing this game user in the domain admins group, installing the game and then removing them from domian admins. this results in permission errors because temp. files are being written somewhere. So how do I get this game user to be able to play the games I want and not have access to install additional programs and modify the system?

Here are the Games:
Counter-Strike
Warcraft III
Serious Sam
Jedi Knight II: Jedi Outcast

Th official best way is to create Microsoft Installer packages (.msi) of the games (e.g. with WininstallLE which is included with winXP/2000) and publish those to the users or computers with Group Policies in Active Directory.

Since you're doing this at home and your main point seems to be gaming do yourself a big favor and skip the domain and keep your network as a workgroup. It's simpler, and doesn't require the knowledge level that running a domain does. Also, it will make it easier to accomplish what you wish...not to mention your 2000 Server will bootup about 4 times faster than a DC.