[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 180
  • Last Modified:

Users Access to C:

Currently I have setup each user to be a local admin for their computers...and that allows them to do whatever they want on the c:.

Is that a wise thing to do?

Please suggest whats best.
0
Shivtek
Asked:
Shivtek
2 Solutions
 
ShivtekAuthor Commented:
Can I give limited access to c:?
0
 
Maniac_47Commented:
You could set them as power users or

you could change them to be just users and set the permissions you want them to have on C:\ and then change permissions on the top level folders on C: that they should have full access to such as giving them limited access to the root of C and the Windows directory, but full rights and access to Docs/settings, Temp, etc.

Personally, if you're domain permissions are correct and in check with the needs of the company, I like to leave the users as local admins.  It lets them install / remove items without needing to call IT, prevents goofy errors from ocurring due to permissions (XP doesn't always give the best error messages), and it will allow you to troubleshoot issues with them via phone calls and remotely without logging them off to get into what you need.

As long as you have their user accounts properly assigned and permissioned up, local admin rights shouldn't hurt you at all.
0
 
L3370Commented:
Well, there are some things you can do, but there are always trade-offs.

If you give them local admin rights to their computer, they will have unlimited access to C:. There may be things that you can do to *kind of* lock it up for an average computer user, but with full admin rights, any person can figure a way around it.

So I'd suggest before giving them full admin rights, ask why it is needed. Many times its because some software app requires admin access to work properly.  If it is because of software problems, then try tinkering with that app...Sometimes the app only needs admin access to SPECIFIC folders, like the folder it writes information to, or the directory of the application files.

You could play around with that. Set the user with typical user level rights, then browse to the specific folders and give the user full permissions to set of files and folders.

If the requirement is more complicated and full admin rights is completely necessary, the only thing that you can do is strengthen and enforce your policies.  That is, make sure everyone understands the rules on computer use and the penalties for non-compliance. And ensure penalties are enforced consistently.
0

Featured Post

2018 Annual Membership Survey

Here at Experts Exchange, we strive to give members the best experience. Help us improve the site by taking this survey today! (Bonus: Be entered to win a great tech prize for participating!)

Tackle projects and never again get stuck behind a technical roadblock.
Join Now