With about 200 users they are all running as regular users (not local
admins or power users) except for a very few.  This is on Windows XP SP2
and 3.

The few that are local admins are because of software that does not work
correctly otherwise, most notably ADP PC Payroll software.  (You'd think
a company like ADP would know better).

 

Some applications that did not initially work we were able to get around
by changing the access permissions usually on the program's install
folder, and sometimes on specific registry keys.

 

Other than that no problems at all.  

 

________________________________

From: David Lum [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, August 27, 2008 10:15 AM
To: NT System Admin Issues
Subject: Local admins?

 

Do most people here have their users set *not* to be local
administrators on their PC's? We have 250 users here all as local admins
and we'd like to move them away from that. BeyondTrust has a privilege
Manager which lets you very granularly set permissions for the items you
want to allow higher access for, I'm wondering of most folks can move
users off of being a local admin w/out a tool like that?

 

Dave Lum - Systems Engineer

971-222-1025

Northwest Evaluation Association - www.nwea.org

 

 

 

 

Confidentiality Notice: 

----------------------------------



This communication, including any attachments, may contain confidential 
information and is intended only for the individual or entity to whom it is 
addressed. Any review, dissemination, or copying of this communication by 
anyone other than the intended recipient is strictly prohibited. If you are not 
the intended recipient, please contact the sender by reply email, delete and 
destroy all copies of the original message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to