Re: Local admins (was RE: MSINFO popping up)

2009-09-01 Thread Ben Scott
I'll chime in and agree that removing admin rights from regular accounts is one of the best things you can do. The rest of the computer world has been doing it for 50 years or so; it's high time the Windows world joined in, too. We started doing this when we started migrating from Win9X to 20

Re: Local admins (was RE: MSINFO popping up)

2009-09-01 Thread Kurt Buff
Thoroughly agree, and I'm finally convincing management to let us make this happen - though our software engineers are not yet aware of it. They'll probably end up on a firewalled subnet of their own, though, and can do what they want with it, as I'll wash my hands of that. But, I'm down to two gu

RE: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread Ken Schaefer
System Admin Issues Subject: Re: Local admins (was RE: MSINFO popping up) Thoroughly agree, and I'm finally convincing management to let us make this happen - though our software engineers are not yet aware of it. They'll probably end up on a firewalled subnet of their own, though, and ca

Re: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread James Rankin
Damn right. Knocking admin rights on the head was the first thing I did arriving at this gig. We no longer have problems with corrupted profiles, and our virus incidents have dropped dramatically. Using mandatory profiles and harnessing the full power of Group Policy Objects has also helped. Despit

RE: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread Sean Rector
ankin [kz2...@googlemail.com] Sent: Wednesday, September 02, 2009 4:29 AM To: NT System Admin Issues Subject: Re: Local admins (was RE: MSINFO popping up) Damn right. Knocking admin rights on the head was the first thing I did arriving at this gig. We no longer have problems with corrupted profiles, and our virus

Re: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread James Rankin
dnesday, September 02, 2009 4:29 AM > To: NT System Admin Issues > Subject: Re: Local admins (was RE: MSINFO popping up) > > Damn right. Knocking admin rights on the head was the first thing I > did arriving at this gig. We no longer have problems with corrupted > profiles,

RE: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread John Aldrich
That makes sense. I can gradually get people used to not being local admins. J Most of customer service is NOT a local admin (only power user at most.) It's mainly just the admin people who are local administrators on their machines. John-AldrichTile-Tools From: David Lum [mailto:david@

Re: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread James Rankin
Even the admin people don't need admin rights. Runas does the trick... 2009/9/2 John Aldrich : > That makes sense… I can gradually get people used to not being local admins. > J Most of customer service is NOT a local admin (only power user at most.) > It’s mainly just the admin people who are loc

Re: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread Ben Scott
On Wed, Sep 2, 2009 at 9:52 AM, John Aldrich wrote: > Most of customer service is NOT a local admin (only power user at most.) The difference between a "Power User" and an admin is negligible. Either can destroy the system through accident or design. "Power User" was a bad idea from day one. C

Re: Local admins (was RE: MSINFO popping up)

2009-09-02 Thread Kurt Buff
of restrictions that regular users have to work under as > well. > > Cheers > Ken > > -Original Message- > From: Kurt Buff [mailto:kurt.b...@gmail.com] > Sent: Wednesday, 2 September 2009 6:17 AM > To: NT System Admin Issues > Subject: Re: Local admin