Hello everyone,
Our school has a new class in which the students will have the task of doing some help desk work and running tickets.
I want to create an AD group with limited admin resources. These select students will need full access to machines and to a few shares I specify.
But what I am looking for are a few examples I can use and then create my own.
For instance. We have a summer help account that I use to allow the students full admin rights to the machines. And low and behold I have
one student who decided to log in with that account to change DNS settings to allow him to bypass opendns. Is there a way to create the group with limited admin rights?
AS I am writing this I realize I can use group policy. But is that the only way?