I've had pretty good luck stripping the local admin rights from my users and myself, but the one that is sticking me in the foot is remote laptops. I have users that take their laptops away from the domain for several days. Occaisionally these users need to install something and I don't want to hand them a domain admin password. I could create a local admin account for them, but I don't want them using that account without contacting me. And I don't want to round up all the laptops every time they are in the office to change a local admin password. How do you all handle instances like this?
Thanks, -Bill ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
