BUR wrote:
> We have 200 computers driving Windows XP. All connected in a Windows
> 2000 server domain.
> For ediocational purpose out studenst have administrator rights on
> the local machines.
What does this mean, for educational purposes?
> I found a solution for this, bur it is NOT a good solution.
> I made Domain Users member of the local AdministratorsGroup.
> BUT: This means that a student on machine has rights on every other
> workstation in the domain. BAD IDEA !
I'd say it's a bad idea to grant any user any admin rights whatsoever.
> Also a virus could spread this way.
Well, a virus can spread many ways. Are all your computers & servers
protected to the gills - updated regularly with all patches/SPs, good
current centrally managed antivirus software that is updated regularly and
which they can't unload (although note that an admin can always stop a
service).
>
> How do I solve this ?
> I was thinking tha I could make "Current User" og something like that,
> member og the Local Administrator Group.
> I also try to remember something about Authenticated User, but I
> can't find it anywhere.
That won't be any different. If you want Joe to have local admin rights on a
PC, you have to add Joe to the local admins group. I don't know whether you
can do anything in your login script/policies, but you might be able to.
Again, I do not recommend this at all. If this is a computer lab, isolate
the network from the rest and get used to cloning/restoring computer images.
>
> Any one have an idea ?
>
> Sorry about the poor english ;-)
No problem - you were very clear. However, in the future note that this is a
Windows Update newsgroup - not the best place for your question. Next time
post in one for your OS version.
>
> BUR
|
Similar Threads
Linear Mode
