Users: Local Administrators or Not

Hi

All of our users are not local administrators on our SBS2k3 network but is
this the way that it should be?

Usually I configure a new user, temporarily making it a domain admin, then
revoke the privileges before letting the user loose.

Ideally I would like to be able to install any programs using logon scripts
or by assigning applications to computers on the server but by not reducing
security. Currently the new user gets the message - you must be a member of
the local administrators.... on boot when I assign applications.

Any advice would be much appreciated.

Regards
B


.

Loading