Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My users need local admin rights but I'd like to restrict the admin shares (c$) to domain admins only. I was reading about adding nt authority\interactive to the local administrator group, but i don't see how to add that group in the GPO. When I change the location to the machine, it doesn't find the interactive group. I'd like to avoid startup scripts of possible and stick to GPO edits

I am running Windows 7 x64 and the server is running server 2008.

share|improve this question
What OS are you using? –  terdon Mar 21 '13 at 16:50
win7 x64 and the gp is on server08 –  acme64 Mar 21 '13 at 16:57
I tried to add the relevant information to your question. Please review it since I am not sure I understood correctly. Some more details on your network infrastructure would be useful. –  terdon Mar 21 '13 at 17:03
If they are administrators, then they could simply reverse any attempts you make to restrict them. Administrators are Administrators. –  Zoredache Mar 21 '13 at 18:16
Not a group policy level rule –  acme64 Mar 21 '13 at 18:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.