95% of our users have only basic "Users" rights. We avoid any application
that requires admin rights, telling folks the app is not Win2k compliant, so
we cannot support it. This statement is technically true, since it doesn't
qualify for MS's Win2k logo program if it can't run as a standard User.
We perform all installations through Group Policy and repackaged MSI files,
so there's no rights issues there.
Our only exception is with Great Plains 6.0: it's not win2k compliant, but
we couldn't just throw it out. So we came up with a script that gives the
"users" group the required permissions on certain subdirectories, files, and
reg keys.
Because of these rules, we've been able to halve help desk personnel, and we
only have to re-image a machine maybe once every few months instead of once
a week.
The users grumbled at first, but this policy has proven its worth. Users
also appreciate near-complete stability in their desktops. Help desk calls
have changed from "this damn thing won't boot again" to things like "how can
I make a group calendar in Outlook?"
Of course, we had to get big-time management buy-in, and predictably the CEO
is the only person other than accounting with "non-compliant" software on
his machine.
HTH.
-ryan-
-----Original Message-----
From: Wes Owen [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 22, 2002 9:46 AM
To: NT 2000 Discussions
Subject: Administrative rights
How many out there do not allow administrative rights on the client systems?
We are attempting to put all users into the Power Users group and I am sure
you can imagine the stir it is creating. There are applications that
require admin rights not only to install, but also to run. One of the
manufacturers fix was to grant full rights to the Setup key, kinda defeats
the purpose don't you think?
If you do not put users in the administrative groups do you make exceptions
for support and development staff? Do you use administrative accounts and
only give support persons rights on admin accounts or do you give their user
account all the rights?
This e-mail and any files transmitted with it are confidential and are
intended solely for the use of the individual or entity to whom they are
addressed. If you are NOT the intended recipient or the person responsible
for delivering the e-mail to the intended recipient, be advised that you
have received this e-mail in error and that any use, dissemination,
forwarding, printing, or copying of this e-mail is strictly prohibited.
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to %%email.unsub%%
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
