Change Group Policy Making Users Local Admins

Hi There,

A couple of years ago, I was working with a tech and asked him to please make a group policy that made any authenticated user on our domain a local administrator of any domain computer they log in to.  We have grown and now this choice has turned into a bit of a nightmare.  I would like to change the policy so that users can maybe be Power Users or something, but not local admins.  They need to be able to download things like Java updates and/or GotoMeeting little executables, but I don't want them to have permissions to install software - downloaded or otherwise.

I have looked through our enabled group policies on the domain controller and cannot find where this setting was configured.  If anyone can help me find it and/or offer suggestions on how to change it, I would very much appreciate it!

Have a Great Long Weekend,
Who is Participating?
annattlscAuthor Commented:
That is FANTASTIC.  Thank you SO SO much, frankmcc!!
Frank McCourryV.P. Holland Computers, Inc.Commented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.