GPO to Run a specific application in the domin as administrator for a standard user account.

Question

Hi All, We a have an application in our environment. it's been used by few users in different machines. The application needs administrator privileges to run. Temporarily I have created a service account and added it to the local administrator group. As the service account has elevated permission and due to security concerns company has decided to provide administrator access only to the specific application. I have been searching all these times to create GPO and apply it to the specific computers but nothing worked. Unfortunately I did not find one in the internet. I created GPO's and tested but nothing worked. Any suggestion ?

Answer 1

Hi @Zaharan Safwan

Unfortunately, it is not possible via GPO to give local administration rights to an application.

On the other hand, you can give a user or a domain group administrative rights on a list of machines through Group Policy Preference. For more information please read this article : Using Group Policy Preferences to Manage the Local Administrator Group

---

Please don't forget to accept helpful answer