User Rights
From: KC (KC_at_discussions.microsoft.com)
Date: 08/28/04
- Next message: Joe Richards [MVP]: "Re: Empty Root, Peer-Root, and/or Placeholder Domain"
- Previous message: Tony Birnseth: "Re: User's email address is stuck in AD"
- Next in thread: Gabe Matteson: "Re: User Rights"
- Reply: Gabe Matteson: "Re: User Rights"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 28 Aug 2004 14:45:01 -0700
Hi,
I have a Windows 2003 AD (Windos Server 2003 domain function level) and all
my clients are either Windows XP or Windows 2000. What I would accomplish it
to give few users that I have grouped together to be able to install and
uninstall applications on the workstations, and nothing else.
Currently, I gave them 'Domain Admins' rights but disable a lot of
functionalities that domain admin can do through Group Policy, such as
disable features in MMC and software restriction. I don't know of other ways
to accomplish this besides giving them 'Domain Admins' privilege. The
delegate control features does not have I was looking for.
Does anyone have a better solution to accomplish this?
I have read one suggestion is to use 'Restricted Group' but I don't know how
it works. What actually is 'Restricted Group'?
Any idea and help will be greatly appreciated. Thank you in advance.
- Next message: Joe Richards [MVP]: "Re: Empty Root, Peer-Root, and/or Placeholder Domain"
- Previous message: Tony Birnseth: "Re: User's email address is stuck in AD"
- Next in thread: Gabe Matteson: "Re: User Rights"
- Reply: Gabe Matteson: "Re: User Rights"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
