local accounts on 2003 domain

[davidwilson11]

Is it possible to have all the users with local accounts on thier systems to be removed from the local admin group and set as restricted users and if so can i manage this from the server.

Thanks

 

[bofhrevenge2]

You can use the "Restricted Groups" group policy to acheive this.

http://www.microsoft.com/resources/...003/standard/proddocs/en-us/SCE_res_group.asp

 

[bofhrevenge2]

Oh this might be better.

http://www.microsoft.com/resources/...dowsServ/2003/standard/proddocs/en-us/611.asp