[451] in winnt
Admin privs restricted to workstation in domain
daemon@ATHENA.MIT.EDU (Don Nelson)
Thu Dec 9 19:46:41 1999
Message-Id: <4.2.0.58.19991209193314.00aba520@psfc.mit.edu>
Date: Thu, 09 Dec 1999 19:43:15 -0500
To: ntpartners@MIT.EDU
From: Don Nelson <dnelson@psfc.mit.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Is there any way to give full admin privileges to the owner of a PC that is
a member of an NT4 domain, so that that person can do anything he/she
pleases with his/her own PC, but restrict that person so that he/she cannot
use domain management tools and cannot touch the C$ hidden shares of any
other PC in the domain?
We are looking for an answer to the same question for Windows 2000 domains.