Restricted User through Active Directory

[ppantelis]

Dear All,
I 'm trying to configure this:
when a user is logging in the domain he/she has administrator rights on the PC (I have defined those rights on each PC).
Is there any possibility (maybe through Group Policies) of changing this user account status, from admin to restricted and the opposite?
Thanks!

 

[porkchopexpress]

Have you looked at restricted groups?

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

 

[ppantelis]

Yes, I have. In fact I 've read this article and proceeded, but with no success. I 'll try it again. Do you really know the results?

 

[porkchopexpress]

We use restricted groups to manage local group membership on all of our clients it works very well.

 

[Paulreg]

Don't forget you can still add users to restricted groups.
They will be removed when group policy refreshes.

 

[gmail2]

Resticted groups are great, provided you want the same users to have admin rights on a wide range of PC's. If you want each user to have admin rights only on their own PC (eg Joe to have admin rights on PC01, John to have admin rights on PC02) then you need to do it manually - there's no way to do this through group policy unfortunately - as far as I know anyway.

I'm not too sure if this is what you were referring to in your original post perhaps?

Hope this helps

Irish Poetry - Karen O'Connor
Irish Poetry and Short Stories - Doghouse Books
Garten und Landschaftsbau