GET-IT: TEAMS DAY | 1-Day Free Virtual Conference all about Teams. Here on Petri.com - 8/12/20 GET-IT: TEAMS DAY - 8/12/20

Securing Local Administrators by GPO

Home Forums Microsoft Networking and Management Services GPO Securing Local Administrators by GPO

Viewing 1 post (of 1 total)
  • Author
    Posts
  • Avatar
    shades
    Member
    #144685

    Hi Everyone,

    I have some users on the network setup as Local Administrators and some as Power Users. Unfortunately, I have no choice but to grant Administrative rights to some users which use and install specific software (Quickbooks, MS SQL Server, Web developing software).

    Problem:
    1. The users which have local Administrative rights have access to other people’s profiles (and computers) locally and on the network (ex: [URL=”file://\computernamec$”]\computernamec$[/URL]).

    2. They also have access to Local Users and Groups in the Computer Mangement Console (they can reset the Administrator account password).

    Those are the two major issues I’m facing at this time.

    Options:
    1. Restrict Local Administrators via GPO? How?
    2. Make everyone a Power User and then give them rights to do the tasks they need via GPO? How?

    Info: Win Server 2003 Ent SP2 (DC) and XP Pro SP3 (clients)

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.