Deploy software on domain controllers without domain admin permissions?

[Markus_G]

Hi all

Is it possible to use Lansweeper Deployment to install and update software on domain controllers without giving the scanning account domain admin permissions?

I use Lansweeper Deployment to keep Notepad++ updated on our servers. Works like a charm, except on domain controllers. DCs don't have local users and groups, so I'm unable to add our scanning account to the (non-existent) local administrators group on DCs. And promoting the scanning account to domain admin is not an option.

According to this KB article, the scanning credential must have access to administrative share C$ on the target computer, which is not the case on DCs.

Any ideas on a solution?

Kind regards,
Markus

[Markus_G]

Hi David,

Thank you for confirming that I didn't miss anything obvious. I'll continue to update our DCs manually.

Hopefully this post will help someone else find the answer to this question I was looking for.

[DavidPK]

Hi Markus, 

Thank you for your inquiry regarding software deployment to domain controllers using Lansweeper Deployment.
 

Unfortunately, due to the fundamental Microsoft Windows security restrictions on domain controllers, there is no direct workaround to deploy software via Lansweeper Deployment without elevated privileges. As you noted, access to the C$ administrative share is required, and domain controllers strictly limit this access.