Re: Why is there a C$ share???

From: Colin Nash [MVP] (x_at_x)
Date: 02/19/05 

Date: Sat, 19 Feb 2005 01:25:36 -0500

"Matt" <Matt@discussions.microsoft.com> wrote in message
news:23286236-C538-437F-9307-D52AF7A0D6D2@microsoft.com...
> Here we setup Domain Users to be a part of a local admins group on their
> PC's, so they can install software without any problems, and so users are
> able to logon to different machines. That must be why they can access
> others
> admin share.
>
> Is there a better way to set this up, not to add them to the local admins
> group, and still let them do almost anything locally on the machine?
>

Try adding INTERACTIVE to the administrators group.

This will mean anyone whoever is logged in locally will have administrator
access, without including network users.

Relevant Pages

  • Re: Installing Software without being Local Admin?
    ... Some of you may remember back in June I posted a topic entitled 'Network Computer Games on Business Machines' which detailed the problem we were having with some of our users installing software & games on their machines, as they were local admins. ... So I need to find someway of allowing users to install fix packs/re-install the software, without giving them full local admin access. ...
    (microsoft.public.security)
  • Re: Global Account for Installing Software
    ... You could create a sub-ou within the main ou for these machines and use ... restricted groups to delegate a subadmin to manage these machines. ... If you want them to be local admins so they can perform maintenance than you ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy and Local Administrator
    ... > users on their local machines. ... > maintain these users as local admins on their machines only, ... > making them power users on other computers on the network. ...
    (microsoft.public.win2000.active_directory)
  • Add additional domain group to local admins groups?
    ... groups other than just "domain administrators" to the local administrators ... on all domain workstation? ... We would like to have a group with members that are local admins on all ... workstations and also have the right to add and remove machines names to the ...
    (microsoft.public.windows.group_policy)
  • Re: Rename Workstation Accounts
    ... If users logon to the domain, and they are local admins of the machines, you ... For instance I disable a control panel ... >> with the standard naming convention are being changed. ...
    (microsoft.public.windowsxp.security_admin)
Quantcast