Nobody is forcing anybody to do this, it's merely a guide in case someone needs it, and surely a better idea than to add Domain Users to local admins. Type in the email address of the guest you want to invite. Invite a guest to your PC: Right-click the system tray icon and select Invite Guest to PC.
ADD SOMEONE ELSE TO THIS PC NOT WORKING PC
Users would also be frustrated if they couldn't do what they want with their computers like they have been able to for years. PC users can use the Guest Invite feature to temporarily share their computer desktop with a person on any other PC in the world. It's with everyone even on same platform, I'm trying to add someone on PC, I would send the invite, they wouldn't get it, they would add me, I don't see it but then when they do it for someone else it works fine. No big deal compared to having to monitor and evaluate every single thing people want to install. SpiceWorks tells me if someone installs unwanted software, and I just uninstall it remotely and tell people to stay away from it in the future. The advantages just outweigh the (for us none at all) disadvantages, and this is a how-to, not a debate about whether it's right or not to do. I think I reinstalled a machine only once in like 4 years because of malware - and who is to say that that would have been different if not admin. Everything is locked down with GPO and our antivirus cannot be uninstalled or deactivated, so we never have issues with malware either.
![add someone else to this pc not working add someone else to this pc not working](https://tencomputer.com/wp-content/uploads/2017/10/family-and-other-add-someone-else-to-the-pc.jpg)
And people are allowed to do whatever they want with our machines within the ruleset we define, which they cannot alter, local admin or not. This way you avoid the error at least.Īs I mentioned, this generates no issues for our corporation whatsoever. Go to the 'Common' tab and set 'Apply once and do not reapply', so its only applied once per computer, and not at every reboot. You cannot press the browse button to find this user. Click Add and just type in INTERACTIVE, select 'Add to this group' and nothing else. I tried making the GPO differentiate between languages with Item Level Targeting, but it doesn't work, so I gave up and did this instead.Īlternately you can divide your workstations into OUs depending on their OS langauge and just create two GPO objects, one for each language. Do not check any of the boxes for delete all members and groups. It will give an error in the event log for each boot because there are two objects in the list where one exists and the other doesn't (since an OS can only have one language), but you can safely ignore this, it doesn't matter. You have to create a new group in the GPO like in step 2 and input your native translation of INTERACTIVE there, also just set to apply once etc. To find out what the exact translation is, go into Computer administration on a local machine, add a new user to admins, select the local machine instead of the domain name for search base and try out whatever you think the translation might be until it returns the name to you as a potential match. Unfortunately for everyone who doesn't run all their workstations in English, you must input the translated word of "INTERACTIVE" depending on your OS language.