Re: Group Policy and user level access
- From: "Dana" <raff242@xxxxxxxxx>
- Date: Sat, 21 Apr 2007 12:32:31 -0400
"Falcon1" <Falcon1@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:73AA3FD3-5346-425F-A428-88DFC5DFF042@xxxxxxxxxxxxxxxx
Hi Dana,
Well in most companies nowadays you need to control what a user can do on
their computers for a lot of reasons.
I have seen IT departments abuse this, and actually reduce productivity of
the employees.
While I agree it must be done, a lot of IT guys have very little knowledge
outside of the IT world, that they actually cause more problems by making
very restrictive policies
If you go in places such has
Desjardins, Canadian Aviation Electronics (CAE), Merck Frost ect...
Security
is taking extremely seriously much more than what we need to implant in my
case, these are a couple of examples which have happened in our companie
that
seriously cost money and time to repair and have delayed critial projects:
I can agree, and yes protecting the network is important, but again a lot of
IT only guys lack the exposure to other technologies and systems that they
end up causing more problems. Especially the windows IT admins, very few
have any experience in technology outside of windows.
- You need to control what gets installed on their computer. If a user
installs a lot of non-approved softwares (Screensavers, toolbars, illegal
softwares ect...) that will slow down their computers, might even crash
it.
A policy in your company handbook solves this problem. Having IT scan the
computers for unapproved software results in action against that employee,
up to being let go.
This way users are allowed to add the tools they need, but are held to the
fact that they cannot just install anything.
- We get audited by Microsoft every once in a while, I have users that
unfortunately do not understand that part and they install illegal
softwares
such as some of Microsoft of their computers.
On this I agree especially for licensed products.
Here notifying employess that this can be an action that would result in
termination of employment would probably help your problems while allowing
users the productivity they need.
- Plus removing admin rights shouldn't affect the users productivity,
Lots of programs need admin rights.
"Dana" wrote:
"Falcon1" <Falcon1@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A8B0CD29-813E-4509-88CA-97AD85252E88@xxxxxxxxxxxxxxxx
Hi,
We are running Windows XP Pro and 2000 Pro on our computers. I'm in
the
process of learning Group Policies and how to create, manage, deploy
and
troubleshoot them (AD is still on 2000 Server based)
My 2x questions are:
How come when I remove the local Administrator rights to a user and
leave
him on a basic user level access we run into all kinds of software
issues
that we do not have if the user is part of the admin group. Such as
Outlook
printing issues that can't create documents in Temp folders and so many
other
sotwares having all kind of hickup behaviors?
Why do you want to interfere in the productivity of others.
My second question is it possible to leave my users in the local admin
groups but with group policy deny them the rights to install or remove
any
applications? If so how?
Why do you want to limit what a person can or cannot do.
Any help will be greatly appreciated since I'm kind of in a nightmare
in
troubleshooting and administering all of what goes on the users
computers
Thank you
Gabriel
.
- References:
- Re: Group Policy and user level access
- From: Dana
- Re: Group Policy and user level access
- From: Falcon1
- Re: Group Policy and user level access
- Prev by Date: Re: Encryption
- Next by Date: Re: Group Policy and user level access
- Previous by thread: Re: Group Policy and user level access
- Next by thread: Re: Group Policy and user level access
- Index(es):
Relevant Pages
|
|
