A couple of years ago, I was working with a tech and asked him to please make a group policy that made any authenticated user on our domain a local administrator of any domain computer they log in to. We have grown and now this choice has turned into a bit of a nightmare. I would like to change the policy so that users can maybe be Power Users or something, but not local admins. They need to be able to download things like Java updates and/or GotoMeeting little executables, but I don't want them to have permissions to install software - downloaded or otherwise.
I have looked through our enabled group policies on the domain controller and cannot find where this setting was configured. If anyone can help me find it and/or offer suggestions on how to change it, I would very much appreciate it!
Have a Great Long Weekend,