We are about to roll out W2K (engl) on a global base to several thousand workstations.
Our Servers will stay on NT4 so we will not use Active Dir etc at this time.
Especially our home office based Laptop users
will need a more ‘open’ security approach, as
the have to be able to install printers, etc.
The question is:
Can anybody recommend the security profile settings we should use for those users.
We clearly don’t want to make anybody Admin
on their local machines, but the Power UserGroup security is still to restrictive.
I would appreciate to get an E x c e l list showing which options need to be checked for a ‘Super Power User Group’ that can:
Install Printers
Install i.e. missing parts of MSOffice from
the standard distribution share on Network
Update Virusscan files
but
NOT install games, crap, you know what…
(maybe allowing ONLY installs from a dedicated network share, to secure the base installation)…
NOT be able to change pre-set directory schemes (stay within My Documents)…
Many thanks for a quick reply.
Martin.Glueckmann@Monsanto.com
IT Mgr Germany