Desktop

Ask something
Question Locked

Group Policy User Question

0 helpful
2 replies

by rlynch2

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Just wanted to know if a domain user is given admin rights can I restrict them from creating new local users on that pc through group policy. I have had a domain user who needs admin rights create a new local user on the pc. Therefore all the group policy changes made by me on the dc arent applied to his new local account. Hope that made sense, I appreciate any feedback, thanks.

2 replies

by shasca

You can disable local logons all together. Makes it a non-issue

Open the Group Policy as an administrator and go to computer
configuration/Windows settings/security settings/local policies/user rights
and you can then configure user rights to your needs

This discussion is closed to new replies.