Group Policy

  • Thread starter Thread starter Kevin
  • Start date Start date
K

Kevin

I have users that need to be able to install programs and
device drivers when disconnected from our domain. I
don't want to give them "Administrator" because I don't
want them to have full control over event logs, registry
settings etc. The "Power Users" group doesn't give
enough permission to install what they may need on the
road and doesn't provide them the ability to use many USB
devices. Any thoughts would be greatly appreciated. If
I can do it completely through AD, even better....
 
Try making them members of the power users group and giving them the user right to
load and unload device drivers in the appropriate security policy under computer
configuration security settings/local policies/user rights. That still may not be
enough as there are certain rights that simply can not be granted to anyone but an
administrator such as change tcp/ip configuration [Xp Pro allows with network
configuration operators]. -- Steve
 
Back
Top