Templates are generally the only answer, as well as a simple and easy-to-follow "User creation process" document that you issue to all helpdesk staff and insist that they follow it religiously, on pain of disciplinary action. A bit of auditing and checking in the first few weeks will convince them that you are serious about wanting it implemented. If needs be, you can create template users for every different department/site/function in your company. For helpdesk staff, I always find the best approach to be simple documentation - what my ex-boss would call "monkey see, monkey do" :-)
On the other hand, if you really wanted that Copy function disabled, buy a copy of AppSense. It intercepts kernel level calls and can disable anything in Windows - keystrokes, menus, toolbar buttons, everything. Costs a bit though 2008/5/29 Thomas Nilsen <[EMAIL PROTECTED]>: > > Not sure if you can disable copy user function, but why not just set up a > disabled dummy account as a template with the most basic settings and allow > your helpdesk techs to copy from that user only? > > Regards, > Thomas > > >-----Original Message----- > >From: Aaron [mailto:[EMAIL PROTECTED] > >Sent: Thursday, May 29, 2008 9:22 PM > >To: Active Directory Admin Issues > >Subject: Disallowing "copy user" in AD > > > > > >We have had problems with Help Desk techs "copying" a user in > >Active Directory to set up a new user that is very similar in > >roles to an existing user. However, they don't always look > >over the Memberships closely enough and sometimes an employee > >that was "copied" from an existing employee in AD had > >permissions they shouldn't. I have put in a new policy that > >copying a user in AD is no longer allowed and that all new > >users must be setup from scratch. Is there a way to enforce > >this in AD? I would like for the Help Desk to be able to > >create new users, delete users, edit users, just not copy > >users. Can this be done? > >~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in > >eWEEK Test! ~ > > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ > > > > DISCLAIMER: > This message contains information that may be privileged or confidential > and is the property of the Roxar Group. It is intended only for the person > to whom it is addressed. If you are not the intended recipient, you are not > authorised to read, print, retain, copy, disseminate, distribute, or use > this message or any part thereof. If you receive this message in error, > please notify the sender immediately and delete all copies of this message. > > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
