Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Limit Local Admin Rights

Posted on 2014-11-04
5
Medium Priority
?
351 Views
Last Modified: 2014-11-07
Most of my windows users have the local admin access in order to properly run two major/custom applications.
This means they can also download/install other programs (including viruses) and make changes to many things.

I want to know if it is possible to limit admin access using windows or some other application?

Thanks, your help is much appreciated.
0
Comment
Question by:cP6uH
5 Comments
 
LVL 99

Accepted Solution

by:
John Hurst earned 1500 total points
ID: 40421830
Administrators have the keys to the kingdom and uninformed administrators wreck computers.

RULE 1. No user is administrator .
RULE 2. ALL users have UAC turned on.

Not much else you can do with Windows.

You can implement Power Broker for Windows from Beyond Trust. That provides the granular approach you want, but is an add-on product to Windows and your server.

http://www.beyondtrust.com/PowerBroker-Desktops-Windows-Edition.aspx?section=PowerBroker-Desktops-Windows-Edition
0
 
LVL 9

Expert Comment

by:dlb6597
ID: 40422170
I've been able to get many apps working by using process monitor from sysinternals/microsoft. It records all file and registry access and lets you filter on access denied. I launch process monitor, setup filters on the specific app and look for access denied in the log...then grant the appropriate permissions to those registry keys and or file locations to allow the applications to run without local admin privileges. It takes some time, but it is worth it in the end.
0
 
LVL 57

Expert Comment

by:McKnife
ID: 40422705
If security matters to you, avoid software that requires admin accounts.
John's advice, powerbroker desktop, is capable of doing what you require, empowering standard users to use selected applications with higher privileges securely - windows alone is not.
0
 

Author Closing Comment

by:cP6uH
ID: 40429064
I will adjust the UAC settings on each workstation, and get a quote for Power Broker from Beyond Trust.
Thank you.
0
 
LVL 99

Expert Comment

by:John Hurst
ID: 40429069
@cP6uH  - Thanks for the update and you are very welcome.
0

Featured Post

New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What monsters are hiding in your child's room? In this article I will share with you a tech horror story that could happen to anyone, along with some tips on how you can prevent it from happening to you.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question