Solved

Change from Local Admin to power user

Posted on 2007-04-08
2
303 Views
Last Modified: 2010-08-05
Hi,

All the users in my organisaton have Local admin rights.We have added the user name in the groups> administrators.I need to change all the user name to power user.Will the user face any problems or will he be able to do all the tasks as he could do while he was an administrator.

THX
Sharath
0
Comment
Question by:bsharath
2 Comments
 
LVL 2

Accepted Solution

by:
drunknmunky1 earned 500 total points
ID: 18874527
You may find that the user may not be able to install some software.  I'm not sure why but some software installs under power user and some does not.
Also, the user will not be able to make system-level changes or install device drivers (I believe).
However, I was also told that there is a way for power users to make themselves administrators (not sure if this is true or not) so this would indicate some level of system wide changes.
Basically, if you want users to be able to install any software they'd like without being bothered then leave them as administrators.  Otherwise, it is safer to keep them as power users, or even users if that is possible, because it leaves them less likely to install malicious software or accidentally modify important files.  Even the more computer-savvy users could end up damaging the machines with administrator rights.
0
 
LVL 22

Expert Comment

by:Adam Leinss
ID: 18875444
I don't think anyone is going to be able to answer that for you.  Bottom line: it depends.  Power users don't have rights to write to C:\windows.  So if you have any applications that update say an INI file in C:\windows, they will fail to work.  Do you have any of these applications in your organization?  Only way to find out is to load your common applications onto a test box as administrator and then lower yourself to power user.

I was involved in a project where we went from Windows 98 to Windows 2000.  No user was allowed to be power user or administrator to make programs work.  To fix this, I sometimes had to give users rights to folder or registry keys.  Sometimes I had to contact the vendor to get an update to the program.  Sometimes I had to leave them on Windows 98, because my secuity manager would not let me elevate their rights.

Best bet: go department by department and lower right for one test user in each.  What issues do you come up with?  Once you get some, run Process Monitor from Sysinternals.  Microsoft use to have a "Standard User Analyzer", but it seems to have been removed...
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this article, I will show you HOW TO: Install VMware Tools for Windows on a VMware Windows virtual machine on a VMware vSphere Hypervisor 6.5 (ESXi 6.5) Host Server, using the VMware Host Client. The virtual machine has Windows Server 2016 instal…
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question