Re: In reality, are your users "non administrators" on their desktops ?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Marlon Brown (marlon_brownj_at_hotmail.com)
Date: 07/31/04 

Date: Sat, 31 Jul 2004 15:50:40 -0700

Well, in my case since this is a public education organization users
"demand" more "flexibility". At times they want to install software on their
laptops for example and that's alright according to our organization's
policy. Thanks anyway.
"ptwilliams" <ptw2001@hotmail.com> wrote in message
news:%23L3sh3udEHA.3420@TK2MSFTNGP12.phx.gbl...
> I agree. We've got thousands and thousands of users (I don't know how
many,
> probably around the 40,000 mark) and they're all Domain Users ;-)
>
> If they don't require a permission don't give it to them! They'll only
> break something and log a call...
>
>
> --
>
> Paul Williams
> _________________________________________
> http://www.msresource.net
>
>
> Join us in our new forums!
> http://forums.msresource.net
> _________________________________________
>
>
> "Andrew Mitchell" <amitchell@removecasey.vic.gov.au> wrote in message
> news:Xns953783E6511A4casey01@207.46.248.16...
> "Marlon Brown" <marlon_brown@hotmail.com> said
>
> > This is a 4,000 WindowsXP/2000 organization (education business).
> > Currently my users are happy as 'administrators' on the local machines,
> but
> > since we've deployed SMS and patches and service packs can now be
> installed
> > under SMS account (users no longer need to be admin for that purpose) I
am
> > considering downgrade the users rights on laptops from "administrator"
to
> > "power users".
> >
> > Do you maintain yours users as 'power users' or 'administrators' ?
> >
>
> Neither. All users on my network are only users - Not local admins or
power
> users.
> Generally speaking, there is no need for users to have higher permissions
> than this. Admiitedly my network is a lot smaller than yours at only 500
> users, but IMHO the larger the organisation the tighter controls you need
> over what the users can do.
>
> What do your users need to be able to do on the workstation that would
> require them to be power users or local admins?
>
> If the answer to that is that you don't know then they probably don't
> require
> that level of access.
>
> --
> Andy.
>
>

Relevant Pages

  • Re: I need to give an AD user the ability to install SW on PCs
    ... Integrate the user in the group of the local admins ... ... Imagine all possibilities, a software can integrate in a system, ... to capture it in a single permission called: ... Install Software is the same like full permission on the system, ...
    (microsoft.public.windows.group_policy)
  • Re: Question about security group
    ... To install software they need to bee at least local admins. ... groups policy. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Power users cannot install software?
    ... Domain Power Users. ... And you can install software through Group ... account for any user with enhanced privileges. ... email account that's separate from your enhanced login, ...
    (microsoft.public.windows.server.sbs)
  • Re: Does Power user to install software works fine ?
    ... The answer is "sometimes they can install software, ... The issue is really the registry keys and folders that they have access to ... Currently users are local administratrors and I could ... > Does power users are really able to perform application installations just ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Power users cannot install software?
    ... install software to the local admin or power users group on the ... Domain Power Users. ... account for any user with enhanced privileges. ...
    (microsoft.public.windows.server.sbs)