Chad,
I would really reconsider doing this. What is the reasoning for this
decision? You are opening up a potential can of worms with this. And it is
a really bad idea. I speak from experience. End users will be able to
access everything on the local computer. They can do anything. I have had
problems in the past when users would delete their fonts folder to create
more room for their music files! I have had problems with users installing
all of that cr@ppy software like AIM and Weatherbug and Hotbar, et al. Then
they complain that the system is crawling! Well, doh!
Anyway, I am not trying to tell you what to do. I am simply trying to give
you all of the facts / possibilities that you will face should you decide to
move forward with this.
Be aware that using the Restricted Groups - as per Jerold's post - is the
best way to do this. However, there is a potential problem that you need to
address if you do it without applying the patch. The default behavior is to
flush the current members out of the group in question ( local
Administrators group ) and then put in your 'focus' group. This is going to
be a problem. You would need to add your 'focus' group as well as the
Domain Admins group ( as it, too, will be flushed out! ).
HTH,
Cary
