Problems when users have no local admin rights

[Guest]

We're have some issues here - we implemented some new security policies, one
of which was to ensure that users on Windiows NT 4.0 and 2000 workstations
do not have local admin rights to their PCs.

However, we've run into a bunch of little problems. For example, some users
have problems running Outlook 98, some have problems with Excel 97, some
have problems with the spell-checker in Word 97. Also, we had the time on
each PC being updated via the logon script, and now the PC times are no
longer being updated.

Does MS have a document somewhere that details what issues there are with
removing local admin rights, and what we can do to work around this?

Thanks
Graeme

 

[Steven Umbach]

Many older applications obviously have difficulty running in the W2K restrictive
user configuration. Your options are to try making them members of the power
users group, implementing the compatws.inf security template, upgrading the
software, or trying to modify ntfs/registry permissions for the applications.
Using tools like filemon and regmon would be helpful in accomplishing
at. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;269259
http://www.sysinternals.com/