General discussion


prevent admin accounts to log on server?

By ntproenca ·
I run a network and a few servers in a school.
The scenario is teacher A manages classroom 1, teacher B runs classroom 2, etc.. I run the network and the servers.
I run server 2003, and my colleagues install a few basic images I've set up in RIS.
The only way I've found to let them do their job, i.e. to fully manage their classrooms is to put the teachers group a member of the administrators group.

Of course everything worked OK until they started logging on the servers and messing things up.

Can I prevent local and remote access to a server 2003 to members of the administrators group?

Or any other way to keep things under control?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by Jacky Howe In reply to prevent admin accounts to ...

Remove them from the admin group. Create a shared folder on the File Server with appropriate permissions and place your images in there. Map the network share in your logon script. Why do they have to manage the the computers in the rooms?

Collapse -

by gary In reply to prevent admin accounts to ...

Use a GPO to deny listed accounts interactive logon.

Collapse -

by ntproenca In reply to

I am still to try this, but I seen no eason for it not to work. And to do exactly what I need it to.

One never remembers the simplest things!

Collapse -

by ntproenca In reply to prevent admin accounts to ...

This question was closed by the author

Related Discussions

Related Forums