On Thu, Mar 21, 2013 at 11:43 AM, Gregory Sloop <[email protected]> wrote:
> ML> Well, it's a lot more work, but you could use the Windows utilities > ML> FILEMON and REGMON to monitor what file and registry access your > ML> applications require on the local machine, and then grant the local > ML> user access to just those needed items, rather than across-the-board > ML> full local administrator access. > > For goodness sake. > > I think it's appropriate to remember that the networks and > workstations were put there, NOT for the enjoyment and ability of > network admins to insist on technical purity and "rightness," but to > get work done. > > If "technical purity" becomes the paramount focus, IMO, we're doing it > wrong. > > Finally, sometimes political considerations, among others also > outweigh technical purity. And frankly, given the environment and time > constraints, it may be MORE work and cost to figure out what's needed > to not allow local admin privs. > > So, please. Go ahead and warn if you like, but offer some help, don't > just abuse the poster for making a decision that's practical for their > particular situation. I, for one, was not "abusing" anyone. I was offering alternatives to a user who may or may not know of them. Not everyone is conversant with all utilities or practices, especially cross-platform. -- 2B || !2B -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
