I am new to server environment, I am using Windows 2003 as domain server and all users are connected to it.Client machine os are installed with Windows xp and Windows 7 and all users are local admin.My question is how to make domain users to run application without admin rights on there local machine.How can i set group policy with required permission or any other way to give access to Microsoft products and other third part applications with limited access.Also please with any tip and trick in handling servers.Abdul

Hi, All of the user have to login to domain, by default domain users not a member of local administrators group of their workstation.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, Check this out http://support.microsoft.com/kb/816102 http://oreilly.com/pub/a/windows/2006/11/14/how-to-deploy-software-using-group-policy.htmlDisclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Add the domain user in local administrator group. For large organization, you can go with SCCM software. For more information. For GPO queries, please post on GPO forum http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread Thanks