Send a message
7 years ago
I'm working at a school as network administrator where I was trying to figure out how the students had so much access as described in
I found the problem, the previous techs had set them as local administrators on each machine. So it didn't show up in Active Directory or any GPO, they could just do whatever they wanted on any student machine. Including install software. So what I've done is taken them off of local administrator on one lab just to test how it works, and apply a restrictive group policy on their user interface so it's more locked down.
The problem is, users can still install software. They just can't install it to the program files directory. If they install to a thumb drive, works perfectly. If they install to their desktop or network drive, works perfectly.
I thought they couldn't install software if they're just set as a normal Domain User with no elevated priviledges on the network, but apparently they just can't install to the program files folder. Any help would be great, thanks!