I have some users in a new domain, they are restricted and can't install or uninstall programs from their accounts...My question is: Is there a way to install programs from the Domain Controller without having to log off the users from their restricted accounts? If this is not possible, what's the best way to install or uninstall programs in their machines? Thanks a lot.

There is no "best way". There are different ways that fulfill certain situations and budgets. SMS is one of the most robust packages to do this, and one of the most expensive to buy and implement due to its complexity. You can install programs that are packaged in MSI files via Group Policy. That may be to the way to go here. That way, OU's of computers and/or users have a consistent set of software on them all, and it leverages Active Directory that you already have in place. "Milk was a bad choice!"

SMS is one of the most robust packages to do this You can install programs that are packaged in MSI files Do you have a link to SMS software, is there a cheaper one than SMS? Are Programs that are available in MSI files common? Thanks a lot heropsycho2177

Cheaper than SMS = Group Policy software installs, which is "free" since you have an AD infrastructure in place. MSI's common? Depends on what kind of apps you're talking about. Apps from large vendors like Microsoft commonly have MSI's included in the install media. Smaller ones not so much, but it's still a case by case basis. "Milk was a bad choice!"

Altiris works well also. Life is more painless for those who are brainless.

before attempting to implement something like this, you should get a better understanding of networking in general. I say that based on other posts where you didnt know what AD was. I mean no disrespect, I just dont want to see someone get too far in over their head and lose their job when it blows up due to lack of understanding.,