Domain Admin Can't Install to Laptop

We've given a laptop to one of our users, and configured it like any other workstation we produce for our users: "Domain Users" has been added to the Power Users and Remote Desktop Users in the computer management, as well as given modify permissions on the hard drive's security tab.

The user has to be added as an admin to the local machine, for a number of reasons related to taking it off-site. This is the only significant difference that comes to mind between the laptops and our normal workstations that comes to mind.

When we had to install software to the computer today, I was told I didn't have permissions enough to install software on the computer, and was forced to install it as the local machine's administrator.

I've found lots of information about preventing everyone BUT domain admins from installing software, but I haven't come across anything about how domain admins can be restricted from installing software to a machine. (I installed this same piece of software on at least 8 other workstations this morning, as a domain admin.) What am I looking for, that doesn't seem to be coming up in my research?

 

Did you join it to domain ?

 

I was on the domain and remoted into the computer, which was also on the domain.

 

Has it been added to the correct Organisational Unit and group in Active Directory on the server?

 

Yes, it was. (Sorry for neglecting to reply for so long.)

 

Try opening a command prompt, enter
gpupdate /force
and allow it to reboot.

 

If that last suggestion didn't work, I think I would do a cold startup, log in as the administrator of the local machine, delete the (your) network administrator's user profile in Documents and Settings (obviously back up any files if you need them), then do another cold startup and log back in as network admin.

After that, I might start wondering if the Windows installation might have been "dodgy ".

Matt