If I restrict all local users from the desktop admin group, but I need to install something for the user, what would you suggest I do to get around that restriction, so I don't have to log in as myself?
If you restrict users, you aren't going to be able to install most applications without logging in to the computer as local administrator or as another user that has elevated privileges. The quick and easy way to do that is to start the setup program using Secondary Login, which is better known as Run As. Right-click the setup program while holding down the Shift key; then click Run As and type your credentials.
There are other methods, particularly if you're talking about automated deployment of applications that require elevated privileges to install. For example, Microsoft's SMS was made for this scenario. Any program you deploy via Active Directory installs with elevated privileges, as well. Tools such as AutoProf Profile Maker make installing programs with elevated privileges much easier.
Dig Deeper on Windows client management
Related Q&A from Jerry Honeycutt
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.