I want to lock down some users...but not others...

[Kelvin Beaton]

I have my users loging into my domain using Win2000\XP. The server is
Win2000.

I have a group of users who I don't want to be able to install anything on
their PCs.
I have another group I want to allow them to install software locally on
their PCs. This group I could add to the local Administrator's group, but
it's a pain to go around to all the PC's and make that change. There must be
a better way.

Is there a paper or artical that would help me throught the various options?

Thanks for the info!!!

Kelvin

 

[Shenan T. Stanley]

I have my users loging into my domain using Win2000\XP. The server is
Win2000.

I have a group of users who I don't want to be able to install
anything on their PCs.
I have another group I want to allow them to install software locally
on their PCs. This group I could add to the local Administrator's
group, but it's a pain to go around to all the PC's and make that
change. There must be a better way.

Is there a paper or artical that would help me throught the various
options?

Start using your Active Directory. Use the group policies, put the users in
seperate OUs, etc.

Search Microsoft's site and Google for more info.