Limiting user accounts on certain computers In AD environment

  • Thread starter Thread starter Sean
  • Start date Start date
S

Sean

I'm running AD with a win2k3 computer (very small, one domain, one
domain controller, 4 PC's and 6 Users...all PC's win2k or higher) I
have a person who is part of the administrators group in the domain,
but there is one PC in particular that I don't want him to have full
access from. I'm assuming I need to somehow limit his access on that
computer account, but i'm not sure I totally understand the idea
behind having computer accounts. How would I do this? Please ask if
I need to provide more or different information. Thanks!
 
If that person is a member of Domain Admins group, its impossible. They will
be able to revert any changes back.

--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


I'm running AD with a win2k3 computer (very small, one domain, one
domain controller, 4 PC's and 6 Users...all PC's win2k or higher) I
have a person who is part of the administrators group in the domain,
but there is one PC in particular that I don't want him to have full
access from. I'm assuming I need to somehow limit his access on that
computer account, but i'm not sure I totally understand the idea
behind having computer accounts. How would I do this? Please ask if
I need to provide more or different information. Thanks!
 
Back
Top