You are indeed right that you need management buy-in from the start. Also this list provided news of CPAU.exe, a very handy tool for those few apps that people need that won't run properly without local admin rights. You can probably use filemon and regmon to find the cause, but when you are snowed under with work, CPAU gives you a quick and easy fix for this very annoying issue.
2008/8/27 Kevin Lundy <[EMAIL PROTECTED]> > We did, without tools. However I think the real key was we had excellent > support from senior management. Indeed it was almost a mandate. > > > On Wed, Aug 27, 2008 at 10:15 AM, David Lum <[EMAIL PROTECTED]> wrote: > >> Do most people here have their users set **not** to be local >> administrators on their PC's? We have 250 users here all as local admins and >> we'd like to move them away from that. BeyondTrust has a privilege Manager >> which lets you very granularly set permissions for the items you want to >> allow higher access for, I'm wondering of most folks can move users off of >> being a local admin w/out a tool like that? >> >> >> >> *Dave Lum* – Systems Engineer >> >> 971-222-1025 >> >> Northwest Evaluation Association – www.nwea.org >> >> >> >> >> >> >> >> > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
