Hello, I have setup a Windows server with 5 users. I have created all of the account and mapped drives and applied right and all seems well. One thing though is on the users pc they cannot install any updates or install any programs on their desktop. How do I give them rights to do this? They can download from the web but can install. And I can't find where the policy would be set on the server. Hope someone can help. Thanks, Jay

you have to make them a member of the domain administrators group in order for them to install software

Thanks, I am a bit unfamilar with windows server, so forgive me if this question is a bit lame. If I add them to the adimins group I take it it's the same as if they were logging in as admin, right? I'm just worried about the users folders I created and didn't want people looking in other peoples folders.

The LAST thing you'd want is to add the users to a Domain Admin Group. That's completely the wrong thing to do. If you really want to give them enough "Power" to install software, you could create a local account for each user and add the account to the Local Administrator Group. For the user to install software, he/she would then shift-right click on the install executable, and do a "RunAs", then authenticate (in the bottom section) as the local user. That way, they won't have to log off the Domain and login locally to install the software. Life is more painless for those who are brainless.

there is no need to create a local account as they already have a domain account just add their domain account to the local admin group on that compuer

Thanks, I'll try it. I have one other question. These 5 pc were stand alone pc and have been used and all have local accounts. I when I log in the domian it creates a new profile for them with a new desktop and stuff. is is possible to have them log in and have there old desktop setting? if so, how do I do this? Thanks again! jay

Yes, using Roaming Profiles. "Computer security." — Oxymoron