Welcome to NETVN channel
Users on client computers cannot install software themselves when joining a domain
I want people to be able to install software on their own computers, for example WinRAR
That way I'll give them more permissions
This is my domain controller
And this is the computer I want to authorize so that users can install software on it
In the organizational unit called New York there are 3 users, Peter Packer, Harry Osborn and Mary Jane
All 3 of them belong to a group called IT
I will allow these 3 users to install software on their client computers
Next I moved the client in with the organization unit called New York
Then I created a new group called Local Admin
This new group will be set up to have administrative rights to the client computers
Because I want the members of the IT group to have admin rights on the client computer so I add the IT group to the group named Local Admin
So how do Peter Packer, Harry Osborn and Mary Jane have administrative rights on the client computer?
To do that I create a new group policy called Local Admin
Next I browse to my domain and create a new Group Policy Objects
You name it as you like
Then edit the newly created Group Policy Objects
Computer configuration
Windows settings
Security settings
Restricted groups
I added the group named Local Admin that was created in the previous step
Members of the IT group are also in the Local Admin group
Next I set the Local Admin group admin rights to the client computer
Thus Peter Packer, Harry Osborn and Mary Jane have administrative rights on the client computer
Next I apply the newly created policy to the organizational unit named New York
The final step on that server is to apply the changes
You open a command prompt and use the gpupdate /force command to apply the changes without restarting the computer
Back to the windows 11 client
To add IT group members with administrative rights to this client computer I restart the client computer
I double check the list of members with admin rights to this Windows 11 client
A new group has appeared called Local Admin
In the IT group there is a person named Peter Packer, hope he can install WinRAR on this computer
Great, Peter Packer can install software on client computers
The same will happen for Harry Osborn and Mary Jane
Thank you for watching, don't forget to like and subscribe to the channel