I’m setting up AD (WS2016) at home to admin my kids PCs.
What would anyone recommend for limiting their accounts, I’ve blocked the Control Panel and CLI and limiting logon times. I would describe their tech knowledge as enough to be dangerous, they know what an exe is and if they think running it will help they will.
I’ve proper hit a blank in what else to limit, maybe me not seeing the danger, as its something normal to me.