What I am looking for is for the policy to say, "this user is normally a full admin, but on this workstation (or set of workstations) he is just...
I would like to prevent our domain admin users from having any admin privileges on their own desktops. This is in order to prevent IE and other...
Separate names with a comma.
