|
Posted by Eric on September 3, 2008, 10:48 am
Please log in for more thread options
Hi, (sorry for my poor english ;p)
the big company where I am actually has something like 600 users that
are member of the "builtin\Administrators".
We have a project to remove thoses users from this group.
1. I would like to know if some of you have already done such project
and if so, please could you tell me if you have some advices !
2. My second question is do you know, by experience, in which situation
users need admin rights on their workstation ?
I have isolated this situations :
- Install a local printer (I dont find any way to not given them the
admin rights).
- change IP address (on Win2k but they will be upgraded to XP and
added to Network Operators group)
- Some particular applications (and I change some security settings in
registry/file to let them access the application with their account
- Access to particular USB key (I dont find any way to not given them
the admin rights).
Do you see other potential problem ?
Thank you for your advices
--
Eric
| 
XML Sitemap