Yes, its called the Access this Computer from the Network right under User Rights Assignment. However, be careful with how you use this policy and how you target it. Darren -----Original Message----- From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Sunshine Baines Sent: Tuesday, June 10, 2008 5:35 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] Do not allow local administrators connect remotely Is there a policy that will prevent local administrator accounts from connecting to machines remotely? For eg... Connecting to manage computers. Connecting to registry. I'm just concerned about local administrator accounts and guest accounts. *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************ *********************** You can unsubscribe from gptalk by sending email to gptalk-request@xxxxxxxxxxxxx with 'unsubscribe' in the Subject field OR by logging into the freelists.org Web interface. Archives for the list are available at //www.freelists.org/archives/gptalk/ ************************