Subtleties of group policy settings

Question

Information Security

Soon, the organization will need to reinstall systems in bulk to users. It's time to get the safety rules right. Naturally, it is impossible to give everyone admin rights, but I would like to avoid fascism. Share good articles on setting up group policies or tell us how it is configured in your company.

Answer 1

Tip: using group policies, take away admin rights from everyone, and distribute the rights of a regular user. If some program does not work with user rights, then you need to look with your hands (using sysinternals utilities) what exactly it needs (for example, access to registry branches, or to the file system), and give it.
No one (even a system administrator) should work with administrator rights on a computer.