AD and User Privileges

First, let me start out by saying, I am sorry, I know I am probably in the wrong spot to ask this question, but I don't know where else to go, I don't see an Active Directory forum.

Now, for the question..... We have a domain setup and users in that domain who log on to local machines. We have noticed that they are changing computer settings, installing ***, uninstalling programs.... etc... so...

How do I deny administrative privileges to users on the LOCAL computer?OK, thats really not a SQL Server question. :-) If you have a domain, the users won′t be able to install things on the computer unless you grant them administrative rights. Seems that somebofy bypssed this security mechanism. In a domain you can set group policies to arrange certain right and organisational units together. But I think you will be better occupied in any newsgroups that are covering active directory like thise one which can be found on http://Groups.google.com . You are right here at the (M)icrosoft (D)eveloper (N)etwork :-)

HTH, Jens Suessmeyer.

http://www.sqlserver2005.de