Solved

Special request form to grant user Administrator rights

Posted on 2010-09-09
4
258 Views
Last Modified: 2012-05-10
We have struggled with the issue of granting users admin rights for years.  Our company has many staff in other states and countries whom we support.  These customers are constantly opening tickets for admin rights issues and it's becoming a burden on our Help Desk.

My boss has tasked me to come up with a special request form for users to sign if they are approved to be granted this admin access to their computer.  I'm wondering if anyone out there can shoot me an example of a form similar to the one I describe so I may use it for reference.

Thanks
0
Comment
Question by:helpdesk77
  • 2
  • 2
4 Comments
 
LVL 23

Accepted Solution

by:
Brian B earned 50 total points
ID: 33637860
I don't have a specific form, but the wording is important:

User name

Machine name

The user understands that by being granted local administrative accounts to their system, their system is exposed to increased security risk. The user will be held responsible for any actions or changes made to the system that modify or disable security or cause the system to be infected by a virus or malware of any type.

User's Signature

Manager's Signature
0
 
LVL 2

Expert Comment

by:Mbrincat
ID: 33644317
if its for installation of software.... you could just create an account with the rights to install

for example:

Domain_Name\Installer

then when they want to install software they should right click and use "Run as..."
0
 
LVL 23

Expert Comment

by:Brian B
ID: 33656856
I supposed if it could even be considered that users are allowed local admin rights, then having an install account isn't so bad. However this kind of account could also allow users to log on and then you wouldn't be able to trace user activity.

Perhaps you could also look at wether or not they could get by with power user security.
0
 
LVL 2

Expert Comment

by:Mbrincat
ID: 33660093
if you religiously change the password of the install account prior to allowing them to log into the machine then you can keep a log of who was given the credentials per week? they'd have to call up for the admin rights anyway...?
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Are you unable to synchronize your OST (Offline Storage Table) file with Microsoft Exchange Server? Is your OST file exceeding 2 GB size limit? In Microsoft Outlook 2002 and earlier versions, there is a 2 GB size limit for the OST file. If the file …
Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

861 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question