So here is the scenario;
I’ve not long begun a new role, on arrival i was made aware that EVERY user within the business has local ADMIN rights. To which i replied “pardon?!”.
As a result of this, as im sure you can imagine. I have a ‘rebuild’ list as long as my arm which is continually growing.
There is a reason for this however! A major part of what the company does is consultancy all over the world and mainly in very rural areas which have limited/no internet connectivity. I.e Africa, Areas of Pakistan (Also rife for virus/malware).
Usually the clients have software packages or clients etc. which our consultants must install to access the clients databases/systems. Due to the lack of internet connectivity, this isn’t something we can even do remotely – Therefore they have local admin to do it themselves.
Help!! This is causing me a world of headaches!
Here’s what i would like to achieve;
1) I want to remove all local admin rights from the user accounts
2) I want to enable users to install software temporarily in a ‘quarantined’ area (i think ‘sandbox’ solutions sort of do this?? I’m not 100%) – Obviously i would want this to be the ONLY place they can install and ideally on a different partition. (Easy to format when it goes ‘belly up’) – which it always does hence the rebuild list.
Any Help, Advice, Resources, Software recommendations would be much appreciated.
Thanks in advance.