Group Policy restrictions for Local Admins

kenw_at_kmsi.net
Date: 05/26/05

  • Next message: Robert Moir: "Re: Group Policy restrictions for Local Admins" 
    Date: Thu, 26 May 2005 14:29:46 GMT

    Maybe this is a lost cause, but it's worth asking.

    It should be possible to use Group Policy to restrict that ability to add
    and remove software -- or, alternatively, restrict what software will run
    -- for people who have local admin rights. I'm looking for ideas on how
    best to do that.

    Granted, people with local admin rights could, in theory, do anything they
    want with "their" PCs. In practice, however, 99% of users would have no
    idea how.

    /kenw
    Ken Wallewein
    K&M Systems Integration
    Phone (403)274-7848
    Fax (403)275-4535
    kenw@kmsi.net
    www.kmsi.net

  • Next message: Robert Moir: "Re: Group Policy restrictions for Local Admins"

    Relevant Pages

    • Re: Setting up new users
      ... could do is to let the users logon as the guest account. ... configured in permissions for a share folder so keep that in mind. ... Use Group Policy to restrict the users further. ...
      (microsoft.public.win2000.security)
    • Re: Read only account
      ... You can restrict a user account so that is only has read/list/execute ... services/client&server data redirection] to restrict redirection of ... to save their password for their TS client connection via Group Policy. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Group Policy for locking down windows xp
      ... Your best bet would be to use a combination of Group Policy and ntfs ... permissions to restrict access. ... With XP Pro you can also use Software Restriction Policies to restrict what ...
      (microsoft.public.windows.group_policy)
    • Re: Disable regedit/registry
      ... executables so that regular users do not have execute permissions. ... There is also a setting in Group Policy user ... configuration/administrative templates/system to disable registry editing. ... However by default that will restrict all users on the local machine from ...
      (microsoft.public.windowsxp.security_admin)
    • Re: best method to restrict application execution on terminal servers
      ... I would probably apply a GPO the OU where the terminal server is located. ... You can restrict to users to run only certain apps here: ... User Configuration, Administrative Templates, System. ... You will also need to enable "User Group Policy lookback processing mode" ...
      (microsoft.public.windows.server.active_directory)