Computer /User Restrictions?
OK, I have previously looked at applying restrictions based on computers which I had seperated based on room/department. However after briefly playing around with the settings, I couldn't actually find a good enough reason to start applying restrictions in this way. Currently resrictions are seperated into teachers and pupils allowing slightly different restrictions to allow staff a little bit more control. These policies are then applied to any computers when the user logs on. Having serperated each year group it is possible for me to change the access each year group has individually.
Now I have been speaking to another techie at a different school where they apply restrictions based on computers. Obviously any user who logs on cant do anything that IT support dont want them to. But then this results in having to do some software installs whilst logged on as the local admin rather than a network user.
So how do you do it? And what are the advantages of restricting computer groups over users?