user rights??

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Much to think about here!

To configure user rights in regard to what users can configure on their desktops you can control this with security groups and also Group Policy. Group Policy can mean you can restrict certain parts of the desktop such as access to control panel. Group Policy is a massive topic so I suggest you have a look on the MS website and also configure a few group policy objects in your test domain so you can get a better idea of what you can do with GP.

As for groups you can use them for administration of access control lists for shared folders on your server. From the share you created in the other thread you could create user *group* called Finance in AD, add a couple of users, and then change domain users in the security tab and add the finance group instead. This means you have restricted access to that folder only to members of the finance group. There is other factors to consider here such as share\NTFS permissions and also inheritance, all covered in the 70-290!

Any questions just ask.