using Domain Admins

[caddnima]

when a user is a member of domain admin, they have access to \\compname\c$.... which is I think is dangerous...

someone suggested to remove these users from the group... as a domain admins... which I did...

1) they cant look on their calendar via time-gui because they dont have priveledges....

2) the norton corp edition cannot scan local drive because of some errors that is directly related to not belonging to the group "domain admin".

with W2k stations... i dont have any problem bcause i can force them to be administrators locally.... but with NT users... it is totally different...

any suggestions?

 

[brontosaurus]

why is it different for NT users?

 

[PCBlondie]

Put the users back into the domain admins group...then set a group policy blocking that group from accessing the information that you need blocked.