Re: How do manage your workstations?



If you are using a domain controller then you can setup group policys in the
active directory to lock down settings like changing the ip address or
display properties etc.


"Amartyr1" <Amartyr1@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:18D8F07F-6939-42C2-9597-F0DB77193A25@xxxxxxxxxxxxxxxx
It is ideal for network administrators to have all workstation setup so
that
users are logon as regular users (not power user, not administrator).
The
main problem I have when doing this is when it is time to upgrade an
application programs, or a device (such a network printer) needs to be
added.
For the most part these functions require a local administrator rights.
Therefore I have to logoff the regular user, then I logon as local
administrator so I can update programs or add-in devices. That's no big
deal
if I'm just doing a handful of workstations. However, if there are
hundreds
of workstations involved, it's really time consuming!

For now, I just make everybody a local administrator on their own
workstation. That way the users can do program updates, add devices, etc.
However this presents a serious problem when users begin to play around
and
install authorized programs and altering system settings.

I just wonder what other IT professionals are doing to mitigate this
problem. Maybe there is remote installation system that push program
updates
(or installation) to the workstation and that system logons on as domain
admin (which is local admin by default).

Are you a network administrator? What do you do? I love to hear your
story.

--
Angel Martires
Director of Information Technology
NSBN LLP


.



Relevant Pages

  • Re: Programs that need admin rights, but user shouldnt have them
    ... Some GPO settings stick and some don't. ... >> Administrator on the computer (e.g. some of the Windows XP Firewall ... >> indicates whether a local administrator can override the setting or not. ... >>>the user to have local machine and domain local admin rights. ...
    (microsoft.public.win2000.group_policy)
  • Re: Keyboard Regional Settings Not Saved
    ... Delete ALL profiles EXCEPT the local and domain administrator, Default User and All Users. ... Log in as domain administrator (or an administrative user other than local administrator) ... Go into the control panel and change ALL regional/locale/keyboard features to the selected country, and apply to the current and default user profile ... This is intensely annoying, especially as the end-users are severely restricted by group policy in what they can open/use/change, so they cannot edit the regional settings while logged in themselves. ...
    (microsoft.public.windowsxp.general)
  • Re: Cannot view event logs from SBS 2000 Personal/Admin Console
    ... Is the administrator / domain admins members of the local administrator ... >I have a few workstations on our SBS2000 server that will not allow me to>view the event log through the Personal or Administrator Console. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Cannot view event logs from SBS 2000 Personal/Admin Console
    ... Just a note it is the domain administrator in the pc local administrator ... >>>I have a few workstations on our SBS2000 server that will not allow me to ...
    (microsoft.public.backoffice.smallbiz2000)
  • Installation of Runtime
    ... I am installing my XP runtime app package on new XP workstations, ... I have to manually move it from Documents and settings, ADMINISTRATOR, Start ...
    (microsoft.public.access.security)