Just take the domain users out of the local administrators group on the
workstations. You are syncing the workstations with the server, right?
--
Regards,
Marina
Microsoft SBS-MVP
One of the Magical M&M's
"Surge" <Surge@discussions.microsoft.com> schreef in bericht
news:2FA30502-AB3B-4EBB-B1DA-844668A46373@microsoft.com...
> I have a punch card application that depends on the client machine's time
> clock. I need to restrict the power users from changing the date and time
> while still getting updates from the time source. I am running W2K3 SBS
and
> all the client PC are XP Pro. Is there a domain group policy I can set to
> accomplish this task?
>
> Any assistance is appreciated.
>
> Sincerely,
> Surge
Re: Prevent Users from leaving the Domain ... When user is a member of Local Administrators group then he/she can do ... You may explain to them that personnel is disjoining... small fee must be paid for subsequent joininig of workstations to domain. ... (microsoft.public.windowsxp.security_admin)
Re: Problem after removed "domain users" from "local administrator"s g ... We finally decided to remove the "domain users" group from the "local administrators" group on the workstations and since doing that we have a strange problem happening. ... Some programs simply cannot be used without administrator privileges, ever, which is an excellent reason to switch to software written by competent people. ... The right answer, in hindsight, was to add Domain Users to the Local Users group.... (microsoft.public.windows.server.sbs)
Group membership and rights ...workstations....Login scripts are of the .vbs type, ... when I place my users in the Domain Users... What local group should the local user ... (microsoft.public.win2000.active_directory)
Re: Domain users members of local administrator ... I have read a few articals mentioning that domain users should be made a member of the local administrators group on client machines. ... Having domain users as part of the local admins group is not consistent with the principle of least privilege and will lead to many more problems than it solves. ... I help to administer an environment with over 600 XP workstations and less than a dozen people have local admin.... The result has been a MUCH easier environment to manage and the users all can do their job. ... (microsoft.public.security)
Re: Time and date lock ... configured the workstations placed the Domain Users in the Local Users ... variable is concerned on any of the machines.... > get placed into the Local Administrators Group and the Domain Users gets ... (microsoft.public.security)
