Hey everyone,
Is this possible? I previously had Server 2003 as a Workgroup, so all my users machines were on a workgroup and they were all administrators and could install software etc.
I upgraded to SBS 2008 because I wanted more control over things, like blocking users from changing desktop wallpaper, and forcing them to do system updates etc.
The only thing is the users are complaining non stop now because they can't do anything it's constantly asking them for an administrator password. So simple things like installing Flash Player they can't do themselves. If I want to give them access to install their own software can I do that? I'm not overly familiar with Group Policy but does GP override anything an administrator account can do?
Like my biggest concern is if I make them all administrators, is there any way they can change their desktop wallpaper if I have a GP that says wallpaper can't be changed? I just don't want them to be able to override things like that or to refuse software updates etc. Is that the way I would do it, or can I make a user role that is a standard user but has permission to install software? Even if there was a way that it could some how pop up on my computer and I can approve something without having to go to their machine since I'm not always in the office.