i want REAL administrative control

[zskillz]

So I would think that this is possible.... but let me know if I'm wrong -

I'm the only person who has access to the administrator account on all of our machines. everyone else uses the same account called "group"


I want to make it so that the people who use the "group" account cannot have any control over -

-sharing
-desktop
-start menu
-etc.


can anyone point me in the right direction here please?

-Z

[Telexen]

Start -> Run -> gpedit.msc

that's a good start...

[zskillz]

the part about gpedit.msc is that it seems to edit the policy for everyone.... including administrators.

perhaps i'm just not using it right

more help needed

[Shakie]

You need to put the Group account into a seperate OU other than Users and apply the GPO to that OU.

[zskillz]

ahh... that would probably help!

keep the suggestions flowing..!!

-Z

[zskillz]

for example... I don't want anyone to be able to install anything....

I don't want anyone to be able to create anything (copy it, create it, anything...) except in one specific folder...


I would think this could be simple, but I can't seem to figure it out

-Z

[zskillz]

^caugh... ahem...^

[meese]

Go here: http://x220.minasi.com/forum/ and see if you can get some info.