Is there a way to give a domain user full control of their local drives at the Group Policy end?
Specifically, my IT Manager wants the following:
a) Desktop control allowed
b) Full access to local hard drives
c) Software Installation NOT Allowed
d) Existing software Updates Allowed
e) Install additional printers
Allowed At the moment, our Win2003 setup does not allow users to do a,b,d,e – I wondered if there was a way using GP to enable these?
Best Answer
Yes, although it's a registry based change so you have to configure an .ADM file. Full details at Microsoft Here. (You obviously want the 'Do not restrict drives' option)