Not giving you a hard time, but I really thought WE were the last people to take admin away from the users. We just did it last year.
A few screamed until I showed them how to \\SomeOnesComputer\c$<file:///\\SomeOnesComputer\c$> Usually I would log in as their boss and do it to their computer. They then understood that the issue isn't just them being admins on their machine but the real problem is everyone else being admins on THEIR machine. That shut them up in a real hurry. To help with the pain we bought RunAs from WingNut Software. It is a cool little shortcut creator that runs install packages with an admin account. So in just a few minutes we can put up install packages to an server share for the stuff they want that we won't support. Kind of a compromise. The software is insanely cheap for a whole domain. Our desktop support calls have gone down DRAMATICALLY since then. From: David Lum [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 27, 2008 10:15 AM To: NT System Admin Issues Subject: Local admins? Do most people here have their users set *not* to be local administrators on their PC's? We have 250 users here all as local admins and we'd like to move them away from that. BeyondTrust has a privilege Manager which lets you very granularly set permissions for the items you want to allow higher access for, I'm wondering of most folks can move users off of being a local admin w/out a tool like that? Dave Lum - Systems Engineer 971-222-1025 Northwest Evaluation Association - www.nwea.org ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
