Hello All!
I have one problem and I need sugestion what is better solution.
At my company there are a group of workers (called local administrators) which job is to administrating all Windows client computers. With GPO, I managed their permission on every Windows client computers to add them in built-in group Administrators to have ability to work localy. The problem is that everyone from that group can connect to client computer throe Shared Administrative folders (C$) which isnt allowed.
How to manage that these people can work with client computers as administrators disabling access via C$?
Disable C$ or to make some special local administrators group?
Thanx for advice.