By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.
I have a Windows 2003 domain controller with about 200 ordinary users. Among them, ten users should have some privileges, like network configure, printer configure, software install, etc. Those ten users should not have administrative privileges, but they do. How can I control each user's admin rights on my Windows network?
Without being able to directly observe your environment, my best guess is that in order to have those admin rights, those users were made members of a group that grants them administrative privileges such as the Domain Admins group or the local Administrators group. I would review the groups that each user is a member of (right click on the user and select the "Member Of" tab), and remove any memberships that are not necessary.