Re: Users: Local Administrators or Not



Ben wrote:

Hi

All of our users are not local administrators on our SBS2k3 network but
is
this the way that it should be?

Usually I configure a new user, temporarily making it a domain admin,
then
revoke the privileges before letting the user loose.

Ideally I would like to be able to install any programs using logon
scripts
or by assigning applications to computers on the server but by not
reducing
security. Currently the new user gets the message - you must be a
member of
the local administrators.... on boot when I assign applications.

Any advice would be much appreciated.

The use of the SBS Client Deployment tools requires users to be local administrators, at least for any time that applications are actually being deployed.


Since I refuse to allow users to be local administrators, I tend not to use those tools, and use things like GPO to assign applications, combined with remote installation of individual applications that aren't quickly GPO-compatible.

Adding a new machine to a LAN, and watching Office, Adobe Reader and the like self-installing before a user even logs on is pretty cool.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.
.



Relevant Pages

  • Re: Restricting Users from Installing Application
    ... You really need to prevent users from being local administrators or power ... users which will stop them from installing most applications that need to ... write to the program files folder or system folder. ...
    (microsoft.public.security)
  • Re: Local Administrator Corporate Network
    ... >We currently have all our users as local administrators. ... >applications requiring local permissions while the user themselves were logged ... >Google Toolbars, google earth, and Google search. ... >Administrator permissions on our workstation. ...
    (microsoft.public.exchange.admin)
  • Local Administrator & Corporate Network
    ... We currently have all our users as local administrators. ... We continue to fall flat when applications we do not want installed, ... Google Toolbars, google earth, and Google search. ... Administrator permissions on our workstation. ...
    (microsoft.public.windows.server.general)
  • Local Administrator Account & Corporate Network
    ... We currently have all our users as local administrators. ... We continue to fall flat when applications we do not want installed, ... Google Toolbars, google earth, and Google search. ... Administrator permissions on our workstation. ...
    (microsoft.public.windowsxp.general)
  • Local Administrator Corporate Network
    ... We currently have all our users as local administrators. ... We continue to fall flat when applications we do not want installed, ... Google Toolbars, google earth, and Google search. ... Administrator permissions on our workstation. ...
    (microsoft.public.exchange.admin)