Re: GPO and Remote Users

From: Steve Bray (steve.bray(removethis)_at_vca.gov.uk)
Date: 07/27/04


Date: Tue, 27 Jul 2004 08:21:25 +0100

Cheers for that.

Steve
"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:KCbNc.33859$eM2.2725@attbi_s51...
> By default logon on with cached credentials is enabled. You could also add
the users
> domain account to the local power users group on their computer which may
accomplish
> what you need, though to remove and add devices they may need to be in the
local
> administrators group which gives them a lot of power on their local
computer , but
> you may not have any other option. Keep in mind that both power users and
local
> administrators can create local users [if they know how] and if they logon
with local
> user accounts, user configuration Group Policy from the domain will not
apply to
> them. You can also configure Local Security Policy on a computer via
gpedit.msc
> which will apply to ALL users that logon with local accounts which may
help prevent
> the idle curious from changing settings that may cause problems on their
computer.---
> Steve
>
> "Steve" <steve.bray@vca.gov.uk> wrote in message
> news:426a01c47324$f22ba520$a601280a@phx.gbl...
> > We need our notebook users who login to their notebooks
> > with a cached copy of their domain profile when out of the
> > office to have the same sort of rights as the Power User
> > would have i.e. install software, add/remove devices etc.
> >
> > If this is possible how is it done?
> >
> > Steve
>
>