Rights of domain users on local computers

  • Thread starter Thread starter Pavel Zacha
  • Start date Start date
P

Pavel Zacha

We plan to implement Windows 2000 Active Directory.
Our developers are used to having high access rights on their local computers (writing to registry, writing to filesystem) .
After login as domain user (member of Domain Users Group with standard group policy) user can't write to registry or some part of the filestem on the user's comupter (their part of Documents and Settings).
How can I increase their access rights to their local computer ?
What are recommended "best practices" ?
(We use W2K, WXP and W98 on our local computers).

Thank you in advance for your advice.

Pavel Zacha
 
Hello Pavel Zacha

i think the best thing is to make them local administrators, give them
rights as administrators at there local computers.

Start-> Settings -> Control Panel -> User Accounts --> "Click on the button"
Add "Type the username of an developer" Next "at this screen you can chose
to add this user to a member of local administrators"

//Christoffer Andersson

Pavel Zacha said:
We plan to implement Windows 2000 Active Directory.
Our developers are used to having high access rights on their local
Click to expand...
computers (writing to registry, writing to filesystem) .
After login as domain user (member of Domain Users Group with standard
Click to expand...
group policy) user can't write to registry or some part of the filestem on
the user's comupter (their part of Documents and Settings).
 
I don't like it when users have local admin rights, it's too risky if they
can install whatever they want...
I would install VPC (Virtual PC) on their machines. If they want to develop
and test stuff they shouldn't be in the same forest as the production
environment.

Just my 2 cents....

Regards,
/Jimmy
 
Back
Top