Datacrash Forum  


Assign Power Users to all the workstation - 2006/05/22 09:13 Hi,

How do i do this through GPO if so Steps.

1. I want to remove loccal administrator from all the workstations except laptop users?

2. Add user to Power User for All the workstations.

Or is there any way i can stop installing softare to local workstations

i'm not sure how exactly done throught restricted group policy ?
  | | The administrator has disabled public write access.
Re:Assign Power Users to all the workstation - 2006/05/22 09:31 Hey there cosy.

First create 2 OU's. In the first OU place all workstations in the second OU place all laptops. Now you can create different gpo's for workstations and laptops.

Software installation can be done through Active Directory, you can find information on www.microsoft.com/technet about it.

Adding powerusers and remove local admins not sure how to acomplish that never took time to look into that.
GPO adicted
  | | The administrator has disabled public write access.
Re:Assign Power Users to all the workstation - 2006/07/20 11:40 you could make a restricted group policy on the pc and laptop ou's. however i think i would handle this one by a script.

restricted group policy >> domain users in powerusers and remove from localadmins. (ppl can access other comps over the network with power user rights, other laptops with admin rights)

script:
add %username% to powerusers
delete %username% from administrators (also remove domain users/authenticated users if they are in it).
  | | The administrator has disabled public write access.