We are handling students under a certain computer laboratory. We don't either wanted to give admin or power user privelege under Windows 2000 since some of them might explore with what an admin or power user privelege can do to the system. In this manner they cannot add a certain VB6 component using their own account. Is there any work around that might enable them to add VB6 component without being admin or PU? Microsoft cannot even give answer about this matter? Pls help.....thanks a lot.
This conversation is currently closed to new comments.
You could look into software distribution applications. Being a Novell guy, I immediately think of ZENworks, but there are others. They are capable of installing software and/or components using the built-in "system" account, which has administrator-privileges. This way this System-account installs what is needed, and the user account uses them. ZENworks is even capable of running an entire application as a System-user, so you don't need to grant Administrator privileges to a user, even if the application does require those privileges to run.
Perhaps you could give the users local admin rights on the machines, but not domain admin?
That way they can be master of their own machines but not have undue access on other machines?
Also I would isolate the lab from the rest of the campus - ideally by taking it off the rest of the network, but failing that by using an appropriately configured firewall and proxy server combination to allow internet access (through the proxy server only) but no other access out of the lab.
If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.
VB6 Security