making student admins on a laptop

[djgreek]

I have a year 7 ou with 200 users in there

i want the entire group to be admins on the dell laptops only

i dont want them to be have admin rights on anything else

can someone please help

[SYNACK]

Um, you can do this with special groups under group policy for computers in an OU. I question the wisdom of it though, it is very close to asking what the best way to set yourself on fire would be.

[featured_spectre]

I have to agree, it is tantamount to asking what is the best way to compromise the network integrity and introduce a nightmare into my workload.

 

I personally see no logic in making a Y7 an admin, at most a restricted user, and if installation permissions are needed, then that falls back to you.

[sjatkn]

I too would question the wisdom of this.

 

What is it you are trying to achieve by giving them admin rights (apart from a support headache)?

[localzuk]

You can do this by putting them in a group and giving that group local admin rights via GPP.

 

But as others have said, the thought somewhat scares me, as it would effectively be compromising the network entirely - a student installs a keylogger or something on the machine, a domain admin logs in and voila they have access to the servers, etc...

[Squip]

I'm 99% sure I've managed to do this with Group Policy Preferences before.

 

User Configuration > Preferences > Control Panel Settings > Local Users and Groups > New > Local Group

 

Action = Update

For 'Group name' choose 'Administrators (Built-in)' from drop-down box

Enable 'Add the current user' radio box

 

Apply that policy on required machines