Questions

How do I put restrictions on a windows desktop administrator account?

Tags: Windows, Operating Systems
+
0 Votes

How do I put restrictions on a windows desktop administrator account?

AGVsport
We at AGVsport have multiple desktops with only admin accounts. We want to make it so users cannot add new icons or alter any of the desktop settings such as the display screen, what items are on the tool bar. Creating non admin accounts would easily allow this but our organization does not want to do that. Users can have the ability to undo these restrictions since they are on the admin account, we just need to know how to get these restrictions in place

Member Answers

    • +
      1 Votes
      ekarafilis

      You can implement Group Policies to restrict these users as you wish. In case you are in a domain environment you can use the Group Policy Management MMC to add your policies on the site, domain or OU level. You can also specify Local Group Policies (desktop level) using the gpedit.msc MMC snap-in.

      Note, that local group policies can be bypassed by local admins while site, domain, OU cannot (at least not by using the MMC gpedit.msc snap-in).

      -----------------------------------------------------------------------
      Lefteris Karafilis
      MCSE, MCTS, SEC
      LinkedIn: http://www.linkedin.com/in/lkarafilis
      Mail: lefteris@karafilis.net
      Blog: http://www.karafilis.net

      +
      2 Votes
      Mehul Bhai

      Please remove your personal identification information like e-mail ID.etc., or you will receive SPAM.

      +
      1 Votes
      ekarafilis

      I would like to do so but for some reason the UI is unresponsive when I am trying to edit my comments. I tried IE and Chrome

      +
      1 Votes
      ekarafilis

      I would like to do so but for some reason the UI is unresponsive when I am trying to edit my comments. I tried IE and Chrome

    • +
      1 Votes
      ekarafilis

      You can implement Group Policies to restrict these users as you wish. In case you are in a domain environment you can use the Group Policy Management MMC to add your policies on the site, domain or OU level. You can also specify Local Group Policies (desktop level) using the gpedit.msc MMC snap-in.

      Note, that local group policies can be bypassed by local admins while site, domain, OU cannot (at least not by using the MMC gpedit.msc snap-in).

      -----------------------------------------------------------------------
      Lefteris Karafilis
      MCSE, MCTS, SEC
      LinkedIn: http://www.linkedin.com/in/lkarafilis
      Mail: lefteris@karafilis.net
      Blog: http://www.karafilis.net

      +
      2 Votes
      Mehul Bhai

      Please remove your personal identification information like e-mail ID.etc., or you will receive SPAM.

      +
      1 Votes
      ekarafilis

      I would like to do so but for some reason the UI is unresponsive when I am trying to edit my comments. I tried IE and Chrome

      +
      1 Votes
      ekarafilis

      I would like to do so but for some reason the UI is unresponsive when I am trying to edit my comments. I tried IE and Chrome