To Avoid Granting Local Admins on Servers and/or Computers

Posted on 2009-02-18
Last Modified: 2012-05-06
I have heard IT personnel using perhaps file monitor or process monitor from sysinternals, now Winternals, to avoid giving users local admins on their computers or servers.  Does anyone have used these tools before or know a best way to figure out what folders to give users modify rights without having to grant them local admin to the entire computer and/or server?
Question by:losgadas
    1 Comment
    LVL 76

    Accepted Solution

    Those tools are used to determine why a limited user is unable to perform what they need.  Once you determine the right to which they need access to perform their task/job, you would use the GPO to grant the user the needed right on the system. You would need to adjust security on a directory or a registry hierarchy to grant the user access.

    The question is way too vague.

    The issue is not to prevent the user from being granted ADmin rights, it is to simplify the management of the system by limiting the number of users who can alter the state of a system by installing/removing applications.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
    The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now