any of you have a Group Policy that will limit a group of users so that they have admin access when logging into workstations and can join/remove from the domain, but they can not log into servers or modify group policy, users, etc?
We used to have a linux domain and we're moving to Windows and changing allthethings. I'll figure it out either way but if any of you have a policy that works well, I can haz a look at it?
