Deploying software to a Domain User that dont have install premission .. how to PLEASE?

Question

HI
I have Windows 2003 server ..
I need to deploy Antivirus MSI Through GOP to about 1000 User
I need to modify the premission so the Domain User can install software . or accpte the installation of software ..
Which Group should I add the user to make them able to install software .. I DONT WANT TO ADD THEM TO THE DOMAIN ADMIN
Or what modify should be done to the GPO to make the user able to install software...
Help Please...........

Thanks for reading

I am install TrandOffice Scan .. the software keeps telling me that You need to have administator premission to install this software ..
I did not try it to deploy this as a machine Policy ..
I will try this
Thanks

THis is an Enterprice Antivirus
The OfficeScan Server Tells that the installation done OK .. but in the client side its say .. No permission

Answer 1

If you're installing it through GPO, set it up as a machine policy. The users' rights won't matter.

If the software is MSI compliant, ordinary users can install it themselves anyway; no special permissions are needed.

Some non-compliant apps do require the user to be a member of the local admins group on the local machine, but you couldn't install those apps with GPO. An ordinary user NEVER needs to be in the domain admins group to install software on a machine!

Better yet, use a corporate version of the anti-virus software. Install the management console and push the agent to all clients. This is done under the context of the user at the agent console, normally a domain admin account. Then the clients will pull the software by themselves.

If using an agent-less package (such a Symantec) then you push the install from the console.

When using a corporate version, user permissions on the local machine do not matter at all. The users have no control over the installation process. You should not be using an ordinary desktop version in a deployment with 1000 users. If for no other reason than the fact that the corporate version will be far cheaper.

Answer 2

I am using a GPO. I just did it last few days ago. I am deploying office 2003 to all my workstations

this is what i do.
1. I go to active directory user and computer to make a new policy from my domain(bbmak.com), let say that policy call office_install

2. I go in to the office_install policy, and use 'assigned' office to computer

Computer configuration->software setting->(add the file 'pro11.msi') there with 'assigned opiton'

3. I create a NEW OU(office_client) in the active directory, and i move the computer that I want to install the office under that OU

4.I go to gpmc and click the OU(office_client), and right click "link existed gpo". I pick office_install from that gpo.