" ..I have had to set-up local machine accounts with non-admin rights,"

I'm not sure how that addresses the OP's original question.

In any case, we set up a separate domain account (prepended with "aa"),
and grant that account Admin privs on the laptop, and then cache those
credentials on the laptop before it goes out the door...

-sc



-----Original Message-----
From: Ben Scott [mailto:[email protected]] 
Sent: Monday, October 19, 2009 1:52 PM
To: NT System Admin Issues
Subject: Re: temporarily allow remote users install perms

On Mon, Oct 19, 2009 at 1:45 PM, Steven M. Caesare
<[email protected]> wrote:
> We just consign ourselves to allowing local admin on laptops.

  I won't do that.  For a few people who mostly live in the field, I
have had to set-up local machine accounts with non-admin rights, with
a different username and password, and given the users some
instructions.  They have to sign some forms that include some fairly
ominous language about threat of termination and legal action.

  I don't routinely run as a local admin on my *own*, personally-owned
laptop.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to