New answers tagged user-management
Yes, you can set up IPsec policies based on computer group membership or IPs. Depending on your AD version and clients, you could also use authentication silos.
You are most likely getting the prompt because you have removed them from the domain admin group and launching the application locally on the DC requires those permissions. You really need the RSAT tools but being all Macs, that is going to be hard without a Windows VM. You might be able to try disabling UAC on the domain controller if you don't mind the ...
Top 50 recent answers are included