To Avoid Granting Local Admins on Servers and/or Computers

Posted on 2009-02-18
Medium Priority
Last Modified: 2012-05-06
I have heard IT personnel using perhaps file monitor or process monitor from sysinternals, now Winternals, to avoid giving users local admins on their computers or servers.  Does anyone have used these tools before or know a best way to figure out what folders to give users modify rights without having to grant them local admin to the entire computer and/or server?
Question by:losgadas
1 Comment
LVL 81

Accepted Solution

arnold earned 2000 total points
ID: 23671213
Those tools are used to determine why a limited user is unable to perform what they need.  Once you determine the right to which they need access to perform their task/job, you would use the GPO to grant the user the needed right on the system. You would need to adjust security on a directory or a registry hierarchy to grant the user access.

The question is way too vague.

The issue is not to prevent the user from being granted ADmin rights, it is to simplify the management of the system by limiting the number of users who can alter the state of a system by installing/removing applications.


Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When asking a question in a forum or creating documentation, screenshots are vital tools that can convey a lot more information and save you and your reader a lot of time
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question