Hi… all of you,
I want to give full rights to our domain users( WIn2k Domain) to their local systems. All users make use of the same systems daily (no need of roaming profiles). I want them to get full rights to install all software( group policy does not solve the purpose because I want them to install all junk utilities) which requires admin privilages, yet they should not get access to the entire domain and also to change the Ip address/System name, time and other systems settings.
I have tired making the users the member of the power users group of the local system, this works but doesnot let to install all software. And also if make the user a member of the local administrators group, he gets access the cahnge Ip address/name …. .
I have made use of the Active Directory Users and Comp—>comupters—> properties—>users and groups— for the above setup.
How can I overcome this, any ideas. Please help.
thanks and regards,