General discussion


Lockdown Administrator Privs

By P-matt ·
What is the best way to lock down the client PC's with regard to software installation and admin privs? Currently the PC User is a member of the local administrator group for the sole purpose of patch installation functioning properly. I need to retain the independent patch installation ability, yet restict most else.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by dmiddltn In reply to Lockdown Administrator Pr ...

1. Using GPO's remove the ability of users to use reg tools, also limit their permissions to the drives via GPO as well... (That'll take care of the install issues)

2. Patch management... look into Microsoft SUS. This allows for Micrsofot patch management, and local storage and deployment. This is also managed via GPO.

Related Discussions

Related Forums