I agree with Martin.

I've only worked in one place where the developers didn't have local admin
rights.

They can have local admin rights and still be members in the domain.

If, however, they decide that they need to be on their own network, place
them in their own network segment and filter all traffic between their
segment and the rest of your corporate environment.

And get them to agree that you will not be at their beck and call when
they've botched their environment.

For this to have any chance of working, your boss and your bosses bosses
need to be in sync, and get this in writing.

Otherwise, you'll just be very frustrated and the entire network will be
plagued with viral infections, hacked boxes, etc.


 
ASB
Technology Integration Specialist
http://www.ultratech-llc.com/KB
 


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of tech forum
Sent: Wednesday, January 22, 2003 5:31 PM
To: NT 2000 Discussions
Subject: OT Local Admin rights for developers


Gurus of the list, I work for Software company with a windows 2000 network.
I am hoping you might offer your advice on a issue regarding local admin
rights and domain membership for development employees. 

Our development team refuse to work with our policy on purchasing and
support of new desktop computers. Development have been purchasing their own
desktop computers, refusing to use our Exchange Server and not adding their
computers to the domain, but using network resources with their domain
accounts. They have full local admin rights and have run applications on the
systems without consideration to other users on the subnet.

This has now reached a fever pitch level after they expensed new desktop
computers, so tomorrow a meeting has been arranged to discuss what to do. I
have been set the task of explaining why their actions are not acceptable
for the rest of the company and why they should not have access to our
network, if they have local admin rights and refuse to join the domain. 

Development claim they do not need to be on the domain and they need local
admin rights to install and run their specific software. 

If any of your have experience of this problem or have some observations I
would really appreciate your advice.

Thanks

Techie

         


------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to