Help on Restricting Users

  • Thread starter Thread starter Alfonso
  • Start date Start date
A

Alfonso

Hi, I would like to know if anybody can help me on this.

I manage a Win2k3 Domain. The dektops' users are currently local
administrators on their machines. Is there anyway to change their
rights to restricted users?

Thank you

Alfonso
 
How can I achieve that on a domain with hundreds of computers?
I'm wondering if I could use some GPO

Thank you
 
Take a look at the 'Restricted Groups' GPO. This will most certainly be one
of your solutions. Another possibility would be to use a startup script.
Remember that, by default, the group 'Domain Users' is a member of the local
'Users' group on all of the computers.

If you decide to use the Restricted Groups GPO ( which I would highly
suggest that you do ) then please pay attention to the behavior of this GPO.
Namely, it will remove all 'members' of the group in question. So, you will
need to make sure that you 'put back' the Domain Admins....

--
Cary W. Shultz
Roanoke, VA 24012

http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)
 
Back
Top