RE: Impact of removing administrative rights in an enterprise running XP


We have gone through the exercise of completely standardizing and
locking down end-user desktops here at the Georgia Medical Care
Foundation. We are not by any means a large enterprise, (150+ seats),
however our experiences should "scale up" to that level.

As a result of our efforts, support calls have gone down measurably,
spyware and viruses are unable to get a foothold on the machines. Our
user community, after a short teathing period, has accepted and embraced
the locked down configuration. Yes, we have to manually install some
software on machines, but as a result of the standardization this is the
exception, not the rule.

We have 2 folks dedicated to desktop support, and two others that pitch
in when required.


Anthony Mabes
Georgia Medical Care Foundation
IT Consultant

-----Original Message-----
From: Drew Simonis [mailto:simonis@xxxxxxxxxx]
Sent: Thursday, July 27, 2006 9:54 AM
To: Focus-MS
Subject: Impact of removing administrative rights in an enterprise
running XP

Hello all,
I wonder if anyone on the list who might work for a good sized
enterprise (10,000+ seats) has gone through the excercise of removing
administrative rights from the user community?

Aside from the effort to inventory all applications and ensure that they
work with restricted permissions, I forsee that such an effort would
likely require changes to the entire support model. Instead of relying
on users to install their own software, it would need to be done for
them. New hardware would require intevention, etc.

If someone has completed this, was support a major new burden, or was it
not as difficult as it might be? If it was, how much of a burden was it
(+ desktop support headcount? +helpdesk calls?)?




Relevant Pages

  • Re: Adaptec AAC raid support
    ... suffers with poor support - with a driver that doesn't work by default ... With a driver that isn't ... With a driver that I can't install onto, ... user community, and screws them in the end when they make bad purchasing ...
  • Re: Transparent bitmaps
    ... needs to be congratulated for developing a quality product. ... places quality at the front of the list, their user community ... been better marshalling support, specifically callback support. ... >> on PocketPCs. ...
  • Re: windows 7 64-bit fortran compiler
    ... TMW is awfully coy and convoluted in the implementation of the batch ... fewer support issues as well as being a service to the user community. ... There's no reason why a user of a given compiler should lose the ...
  • Re: Time it takes to deploy Project Server 2003
    ... Production for Corporate ... the user community. ... > desktops to an enterprise environment is non-trivial. ... > This means training and support. ...
  • Re: Isnt it time to PLACE it in the Forth 200x standard?
    ... string stored in memory to a addr/count representation and vice versa. ... Standard (i.e. moving to addr/count). ... they will be hard to justify standardizing for the reason they will be ... My support for standardizing PLACE was on the basis that it existed, ...