Windows 7 Local Admin Rights and Restricting Application Installation
Is there any way to remove a users local admin rights from a Windows 7 Pro 64-bit PC but allow the user to change network settings? Or allow the user local admin rights so that they can change the network settings but restrict them from installing programs?
ASKER
It's in a Domain. I'll check out your link. We figured GPO would be the way to go but didn't know how to make this particular problem go away using GPO. Will let you know. Tx.
If this is a laptop, GPOs do not apply when the user is outside the AD LAN.
Any and all restriction that you put in I.e. they can not run setup.exe, etc. as the local admin the user can change.
You can configure GPO that will catalog install software when the user is logged into the LAN. Then provided your corporate policy makes it clear for no unauthorized applications.
.
.
.
Any and all restriction that you put in I.e. they can not run setup.exe, etc. as the local admin the user can change.
You can configure GPO that will catalog install software when the user is logged into the LAN. Then provided your corporate policy makes it clear for no unauthorized applications.
.
.
.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks McKnife, we will try this out and get back to you about it...
ASKER
All good. Thanks McKnife! Worked like a charm... One thing to mention is you have to reboot after adding the user.
ASKER
Reboot after adding user to group.
Check secpol on the local machine, and review this link, which may contain the info you need:
http://www.tech-forums.net/forums/f128/admin-rights-vista-windows-7-a-197772/