Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My users need local admin rights but I'd like to restrict the admin shares (c$) to domain admins only. I was reading about adding nt authority\interactive to the local administrator group, but i don't see how to add that group in the GPO. When I change the location to the machine, it doesn't find the interactive group. I'd like to avoid startup scripts of possible and stick to GPO edits

I am running Windows 7 x64 and the server is running server 2008.

share|improve this question
    
What OS are you using? – terdon Mar 21 '13 at 16:50
    
win7 x64 and the gp is on server08 – acme64 Mar 21 '13 at 16:57
    
I tried to add the relevant information to your question. Please review it since I am not sure I understood correctly. Some more details on your network infrastructure would be useful. – terdon Mar 21 '13 at 17:03
    
If they are administrators, then they could simply reverse any attempts you make to restrict them. Administrators are Administrators. – Zoredache Mar 21 '13 at 18:16
    
Not a group policy level rule – acme64 Mar 21 '13 at 18:46

You must log in to answer this question.

Browse other questions tagged .