Click here for important information about

Limiting Domain Users

September 9, 2010 at 07:35:39
Specs: Windows XP
Need to know how to knock all users in an AD Domain to just users (Server 2003 and XP workstations)? Don't wnat their desktops to change or lose their mapped drives. Just don't want them to be able to install software or printers. Still need them to be able to contect to the domain and use the programs. Help!! Thanks

edited by moderator: removed email addy to protect from spam

See More: Limiting Domain Users

September 9, 2010 at 08:15:37
use the PM [private message] function here and don't post your email address unless you want to be on the world wide spam list.

Your question is vague in that all users are users. Or are they? Are they allowed to be admins on their own boxes?

If you web search group policy 2003 restrict installs you should get how to's via group policy.

Report •

September 9, 2010 at 08:53:07
Sorry about that. All users right now are admins to their local machine. When they log in to the doamin they can install software and setup local printers. Upper management now wants to be SOX compliant only have the domain admin be allowed to install software and printers. I hope that this makes more sense. I was told to logon to each machine and under manage set group to "DOMAIN"\Domain Users and "DOMAIN"\Domain Admins. When I remove the "DOMAIN"\Domain Users I loose thier desktop background and mapped drives.

Report •

September 9, 2010 at 10:13:25
You should just be able to go to Computer Management on the local computer and go to Groups and then remove the local account from the administrator group.

No other change required.

Report •
Related Solutions

Ask Question