remove users from Administrator groups ? What should I know ?

Hi, (sorry for my poor english ;p)

the big company where I am actually has something like 600 users that are member of the "builtin\Administrators".

We have a project to remove thoses users from this group.

1. I would like to know if some of you have already done such project and if so, please could you tell me if you have some advices !

2. My second question is do you know, by experience, in which situation users need admin rights on their workstation ?
I have isolated this situations :
- Install a local printer (I dont find any way to not given them the admin rights).
- change IP address (on Win2k but they will be upgraded to XP and added to Network Operators group)
- Some particular applications (and I change some security settings in registry/file to let them access the application with their account
- Access to particular USB key (I dont find any way to not given them the admin rights).
Do you see other potential problem ?

Thank you for your advices

--
Eric


.

Relevant Pages

  • Re: Get Handle Owner,...
    ... my fault the SID for the Accounts i dont get the ... Information is the Network-Account. ... I have full admin ... rights and all priviliges enabled, but i think, i make some ...
    (microsoft.public.win32.programmer.kernel)
  • Security
    ... Logged on to the machine as a local user with no admin ... rights. ... When I do properties on a file i dont see the ... security tab. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: new user - changing alias/name?
    ... from the Documents folder. ... i dont have full rights over the old- ... admin account's folders. ...
    (comp.sys.mac.system)
  • Re: Should I still buy SBS 2003 Premium w/ ISA in light of XP SP2s ICF2?
    ... Admin rights is a very simple story. ... relying upon the firewall to block accordingly the access to workstations, ... don't have the same level of packet-filtering in your favor that ISA ...
    (microsoft.public.windows.server.sbs)
  • RE: Impact of removing administrative rights in an enterprise running XP
    ... While it is true that you can push out patches and software via group ... reporting mechanisms for software/patch installations whatsoever. ... Quite often, the admin rights are ...
    (Focus-Microsoft)