My problem is next. I am system admin in company of about 150 computers. All xp professional, all users. I can't afford to give anyone power user status because they're practically idiots, and will install all sorts of garbage.
But, in one department I have a need for driver installing abbility.
So my question to you is next. Is there any way to permit them to install drivers while staying in restricted "user" group?
there is no domain either.
thank you, Boris :)
Eh-m, driver installation is kernel 'modding', it requires Administrator privs. You may create admin accounts with password 1-day expiration, and grant users install anything with your permission.
Dirty but handy :) No better ideas though.
Alright, so you've got a ton of XP desktops (150?) that AREN'T domain members. In the words of the famous mechanic... "oh, well THERE'S your problem!"
Alright, so you're going to build an active directory domain and join everyone to it Real Soon Now, right? But until then, you've still got this problem.
Do they need to continually install drivers? Like, not just once, but several times, as in "they need to constantly play with new hardware"? o_OTync is correct in that it requires administrative privileges.
I might suggest that if your users need to do this on a repetitive basis, that you give them administrative access, and for the love of God, create system images and use those to (re)deploy the machines if/when your users screw them up.
How many users are you talking about having as the exception here?