Re: Select Domain Admin usage

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

In AD or GPO , is there no way to limit a user from doing certain "things"
on a machine?
Yes but to install software you need admin perm.

I can't possibly believe that I can't limit what a user can do on an XP
machine.
Of course you can but to install software you need Admin perm.

I'm trying to convince my boss that giving these students DOMAIN Admin
access is a bad thing. If I can't, then he will and I know I'll be
cleaning up the mess.
Ok, why don't you try to use GPO to deploy Software?


--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"Sean" <nomail@xxxxxxxx> wrote in message
news:utoRQOQ0GHA.3568@xxxxxxxxxxxxxxxxxxxxxxx
I understand that is the case if I give them local admin access to the
machine.
But maybe you are not understanding my question.

In AD or GPO , is there no way to limit a user from doing certain "things"
on a machine?

I can't possibly believe that I can't limit what a user can do on an XP
machine.

I'm trying to convince my boss that giving these students DOMAIN Admin
access is a bad thing. If I can't, then he will and I know I'll be
cleaning up the mess.


thanks!
Sean





Jorge Silva wrote:
If you're allowing these users the ability to JUST install software on
machines. You're allowing EVERYTHING and nothing more...
:)


.

Relevant Pages

  • Re: Select Domain Admin usage
    ... Jorge Silva wrote: on a machine? ... Of course you can but to install software you need Admin perm. ... why don't you try to use GPO to deploy Software? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Select Domain Admin usage
    ... Systems Administrator ... Jorge Silva wrote: ... Of course you can but to install software you need Admin perm. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Denied Software Installation in GPO
    ... Is there a way to prevent the user with local admin rights to install software in GPO? ... I think you will need to refrase the question cause I have no idea what you mean by "installing software in GPO" ... as far as the administrative requirements of the piece of software, I have always found a way around this in various ways ... I do this by examining what the software is accessing or if it is using COM objects which need security tweaking and so on ...
    (microsoft.public.windows.server.general)
  • Re: Prevent software install
    ... We restrict their ability to install software via GPO. ... All our workstations are set up to do a domain logon. ... I'm trying to prevent the users from installing software on the workstations. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Users
    ... If you are wanting to do this via GPO, ... Our computers are joined to the domain and we let domain users to logon ... they are not able to run windows updates or install software. ...
    (microsoft.public.windows.group_policy)