3 replies
It really depends on what you are trying to achieve by denying the users admin rights to their own machines.
If its to keep the machine "standard" then I would have thought you'd want them to have to ring up and ask so you could find out what they're doing!
Otherwise, I'd suggest they have an account that has admin rights to the machine but for VERY obvious reasons deny anyone domain admin rights. Oh, I assume you have a domain?
Dont give them the actual Administrator account, though. Keep that one secure.
That way, they can play to their hearts content on their own machines without being able to adversely affect anyone else.
The techy guys should have domain admin rights to enable them to get to any machine in the domain. And failing that, access to the machine via the Administrator account.
There are lots of ways you can configure security for users. Your ultimate decision depends on the trade off between them causing problems for themselves vs. you having to interven too often.
Cheers,
Tim.
by sburt
by sburt
This discussion is closed to new replies.
Trending Windows Forum posts
Sort by Trending