HI.
Need to know how to knock all users in an AD Domain to just users (Server 2003 and XP workstations)? Don't wnat their desktops to change or lose their mapped drives. Just don't want them to be able to install software or printers. Still need them to be able to contect to the domain and use the programs. Help!! Thanksedited by moderator: removed email addy to protect from spam
use the PM [private message] function here and don't post your email address unless you want to be on the world wide spam list. Your question is vague in that all users are users. Or are they? Are they allowed to be admins on their own boxes?
If you web search group policy 2003 restrict installs you should get how to's via group policy.
HI
Sorry about that. All users right now are admins to their local machine. When they log in to the doamin they can install software and setup local printers. Upper management now wants to be SOX compliant only have the domain admin be allowed to install software and printers. I hope that this makes more sense. I was told to logon to each machine and under manage set group to "DOMAIN"\Domain Users and "DOMAIN"\Domain Admins. When I remove the "DOMAIN"\Domain Users I loose thier desktop background and mapped drives.
You should just be able to go to Computer Management on the local computer and go to Groups and then remove the local account from the administrator group. No other change required.
Ad Choices