Re: Users with ADMIN profile

=?Utf-8?B?bWFobWFk?= <mahmad@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in

> Hi Adam,
> Thanks for your reply, how do i go about doing what u suggest,
> does it have to be on local machines, or on the server etc.

You would do this from their workstation, running the applications
having permission issues. Using Regmon and Filemon, you discover what
permissions need to be opened up. You would then go back to the server
and input these changes into Group Policy so they propagate throughout
the whole enterprise. If you have a lot of applications, this could
take quite a while, but no one ever said security was easy. :)