I have over 150 student computers and they are in many different buildings and not attached to any servers. We use local GPO for restrictions. How would a guy go about creating a new user group, let's say "Proctors", and give that group all the same permissions as a normal user account but then add that they can change any other user password (but not an administrators) and they can read/edit any file or folder in all other user accounts.
I know I can change the read/write permissions to the user folder but I would like it so that if I create a new user account mid-year, the Proctors group will automatically have read/write permissions to it and be able to change its password. I hope I didn't lose anybody. I appreciate any insight. Thanks.