Solved

Change from Local Admin to power user

Posted on 2007-04-08
2
304 Views
Last Modified: 2010-08-05
Hi,

All the users in my organisaton have Local admin rights.We have added the user name in the groups> administrators.I need to change all the user name to power user.Will the user face any problems or will he be able to do all the tasks as he could do while he was an administrator.

THX
Sharath
0
Comment
Question by:bsharath
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 2

Accepted Solution

by:
drunknmunky1 earned 500 total points
ID: 18874527
You may find that the user may not be able to install some software.  I'm not sure why but some software installs under power user and some does not.
Also, the user will not be able to make system-level changes or install device drivers (I believe).
However, I was also told that there is a way for power users to make themselves administrators (not sure if this is true or not) so this would indicate some level of system wide changes.
Basically, if you want users to be able to install any software they'd like without being bothered then leave them as administrators.  Otherwise, it is safer to keep them as power users, or even users if that is possible, because it leaves them less likely to install malicious software or accidentally modify important files.  Even the more computer-savvy users could end up damaging the machines with administrator rights.
0
 
LVL 22

Expert Comment

by:Adam Leinss
ID: 18875444
I don't think anyone is going to be able to answer that for you.  Bottom line: it depends.  Power users don't have rights to write to C:\windows.  So if you have any applications that update say an INI file in C:\windows, they will fail to work.  Do you have any of these applications in your organization?  Only way to find out is to load your common applications onto a test box as administrator and then lower yourself to power user.

I was involved in a project where we went from Windows 98 to Windows 2000.  No user was allowed to be power user or administrator to make programs work.  To fix this, I sometimes had to give users rights to folder or registry keys.  Sometimes I had to contact the vendor to get an update to the program.  Sometimes I had to leave them on Windows 98, because my secuity manager would not let me elevate their rights.

Best bet: go department by department and lower right for one test user in each.  What issues do you come up with?  Once you get some, run Process Monitor from Sysinternals.  Microsoft use to have a "Standard User Analyzer", but it seems to have been removed...
0

Featured Post

Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
No single Antivirus application (despite claims by manufacturers) will catch or protect you from all Virus / Malware or Spyware threats. That doesn't stop you from further protecting yourself however - and this article is to show you how.
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question