Security

Ask something
Discussion Locked

Lockdown Administrator Privs

0 helpful
1 reply

by p-matt

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
What is the best way to lock down the client PC's with regard to software installation and admin privs? Currently the PC User is a member of the local administrator group for the sole purpose of patch installation functioning properly. I need to retain the independent patch installation ability, yet restict most else.

1 reply

by dmiddltn

1. Using GPO's remove the ability of users to use reg tools, also limit their permissions to the drives via GPO as well... (That'll take care of the install issues)

2. Patch management... look into Microsoft SUS. This allows for Micrsofot patch management, and local storage and deployment. This is also managed via GPO.

This discussion is closed to new replies.