Here is the set up: a few (lets us say 10) machines, not on the
domain. Each will have a "student" account and I would like to limit
access in a systematic manner. Right now, I am using the method that
applies the policy to all but admin and doing it through the .mmc.
This kind of strikes me as a nasty hack, easy for someone to lock out
the admin account by mistake.
My ideal set up would be something where other techs could just add an
account 'student' and then run a custom template and it would lock
down only that account. Is this possible outside of a domain?
you can respond via email to mikes -at- ccs -dot- neu dot edu
or on here.
-Mike
|