Re: frequently-traveling users and their company-issued laptops

You can allow your users to operate those devices and synch without giving
them admin rights. Usually the program file directory, temp directory, or
%systemroot% directory needs read, write, or modify permissions; but hardly
ever Full Control or Admin rights. It is very dangerous to allow regular
users admin rights.




"Frankster" <Frank@xxxxxxxxxxxxxx> wrote in message
news:89udnSClmPACfmvZnZ2dnUVZ_ridnZ2d@xxxxxxxxxxxxxxx
Make them local-only admins. This way they can change network
card/wireless settings as necessary when they travel. Also, often these
folks will have gadgets such as Palm Pilots or Blackberrys that need to be
synced, etc. Often these (stupid) programs require admin access to operate
properly.

-Frank

"Spin" <Spin@xxxxxxxx> wrote in message
news:4lmht1F2mkk1U1@xxxxxxxxxxxxxxxxx
Gurus,

For you IT manager types working at large companies, what is your policy
regarding frequently-traveling users who have company-issued laptops -
what
level of rights do you give them to their laptops? Do you make them
local
administrators or what? If you do not make them local administrators -
do
you make them call in a ticket everytime they want to install some
software?

--
Spin







.

Relevant Pages

  • Re: adding all users to the local admin account
    ... It seems that some of the applications ... > that run require admin rights to run fully (not Power ... > of the local administrator account? ... You could add "INTERACTIVE" to the local Administrators group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: No permission to view Security Log in Event Viewer
    ... the users are local administrators of their ... I am a network admin and have network admin rights ... >> am unable to view or delete even my own logs. ...
    (microsoft.public.win2000.security)
Quantcast