restricting acces to certain admins

From: Armin (deja.com@gmx.de)
Date: 01/15/02 

From: deja.com@gmx.de (Armin)
Date: 15 Jan 2002 09:34:34 -0800

Hello,

I have the following scenario:

Setup
* windows 2000 AD environment with w2k servers and w2k professionals

Goal
* a certain group of admins should be able to install and administer
the network components (nic, protocols) incl. settings like ip-address
or duplex-settings
* they should be restricted to doing this on the professional systems
only
* they should have as little as possible other priviliges/rights on
the systems
* they will only access/manage these systems when logged on locally
(not remote)

Admins is too much, Power Users doesn't help and I couldn't find Group
Policies that are relevant (except the load/unload drivers policy, but
it's not enough).

The only setup that I have found so far is creating an admin-group
that is denied access from the network with otherwise unlimited local
admin-rights. I could start denying access to non-relevant areas in
the file-system and registry, but it's hard to decide what's
irrelevant. Installing a nic, the driver and some nic-specific
software as well as configuring ip etc. touches quite a few areas.

Any ideas?

Please send copies of responses to my mail-address as well.

Thanks,

Armin.

Relevant Pages

  • Re: Question on installing programs one time and all users can use.
    ... For Admins ... Install for All Users OR ask, for All Users or just the current user? ... If AIM doesn't do this then it is not an XP program. ... > without having to go though each account and run setup again. ...
    (microsoft.public.windowsxp.customize)
  • Re: Continual Error 1321 Trying to Install Office 2003
    ... As to evidence of which app installed wisptis, I suppose you'd have to set ... 2003 sure wants to install it and stalls when it can't because the progress ... Is there any way in the world to get into setup with some custom tool from ... *My Lack of MSFT Support Rant and View Hex Error Messages Do Nothing for the ...
    (microsoft.public.office.misc)
  • Re: Continual Error 1321 Trying to Install Office 2003
    ... it needs and now setup wants to stuff it back in. ... Wisptis is explained ... that will let me do a detailed enough or selective enough custom install to ... people running Office don't use a tablet. ...
    (microsoft.public.office.misc)
  • Re: reinstall intranet company web Error.
    ... AnalyzePhaseZero used 0 ticks ... KB832880 Setup encountered an error: Setup cannot continue because one or ... Setup cannot continue because one or more pre-requisites required to install ... For More details check the Log File C:\WINDOWS\KB832880.log ...
    (microsoft.public.windows.server.sbs)
  • Re: reinstall intranet company web Error.
    ... AnalyzePhaseZero used 0 ticks ... KB832880 Setup encountered an error: Setup cannot continue because one or ... more pre-requisites required to install KB832880 failed. ... For More details check the Log File ...
    (microsoft.public.windows.server.sbs)
Loading