My users need local admin rights but I'd like to restrict the admin shares (c$) to domain admins only. I was reading about adding nt authority\interactive to the local administrator group, but i don't see how to add that group in the GPO. When I change the location to the machine, it doesn't find the interactive group. I'd like to avoid startup scripts of possible and stick to GPO edits
I am running Windows 7 x64 and the server is running server 2008.