Local rights

[Lucien Thierry]

Hi, locally all our users have been added to the "power users" group with
the intention that they couldn't install applications and still work without
too much restrictions. Turns out this is only partially true because setup
will only stop if Windows files are being altered.
So now the users are celebrating this fact by installing all sorts of stupid
apps (incredimail, star trek screensavers and so on).

Is there a way to put all the users back in the normal "users" group (where
they belong) by scripting, or can I make sure they won't install anything by
using group policies?

 

[Shane]

stop being a corporate nazi.

 

[Lucien Thierry]

a perfect network is a network without users.

stop being a corporate nazi.

anything

 

[Erkan CET]

Try to find a logon script to be deployed via Group Policy
that will add "Domain Users" Group to local "Users"
group...

You may find a script at www.microsoft.com/technet

 

[Cary Shultz]

-----Original Message-----
a perfect network is a network without users.

the "power users" group
with partially true because
setup won't install
anything


.

Look into RESTRICTED GROUPS.

HTH,

Cary