With about 200 users they are all running as regular users (not local admins or power users) except for a very few. This is on Windows XP SP2 and 3.
The few that are local admins are because of software that does not work correctly otherwise, most notably ADP PC Payroll software. (You'd think a company like ADP would know better). Some applications that did not initially work we were able to get around by changing the access permissions usually on the program's install folder, and sometimes on specific registry keys. Other than that no problems at all. ________________________________ From: David Lum [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2008 10:15 AM To: NT System Admin Issues Subject: Local admins? Do most people here have their users set *not* to be local administrators on their PC's? We have 250 users here all as local admins and we'd like to move them away from that. BeyondTrust has a privilege Manager which lets you very granularly set permissions for the items you want to allow higher access for, I'm wondering of most folks can move users off of being a local admin w/out a tool like that? Dave Lum - Systems Engineer 971-222-1025 Northwest Evaluation Association - www.nwea.org Confidentiality Notice: ---------------------------------- This communication, including any attachments, may contain confidential information and is intended only for the individual or entity to whom it is addressed. Any review, dissemination, or copying of this communication by anyone other than the intended recipient is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email, delete and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~