That should be right up there with the other questions.
-> Let me share that I was at one shop and we were writing video surveillance applications. A change in IT staff and someone there decided to change permissions, accounts and wiped out desktops of our shortcuts to our tools and compilers to bring them inline with a corporate standard.
That was one rough week as we struggled to recover and the poor IT staffer was pulling past 72 hours to put it all back.
While that corporate standard may work for secretaries or such, it may not work in all other cases.
I have a basic need and can't seem to sort it out. I need to set up a domain user so that he can work on his computer as he always has. I noticed that another guy set this user up previously as an Administrator on the Domain and a local Administrator.
If I switch him to be just a User on the domain the only thing he loses is the ability to do whatever he feels like on the domain should he decide to do something, right?
If I switch him to be a limited user on the local computer than he can't delete things that I put on the desktop, install his own programs, etc., right.
I think I just needed to talk it out. Coming off a 30 hour shift. This makes sense, right?
Seems all of our users have Administrator rights to their local PCs. That's not good. I'm relatively sure only one program we use requires the user operate as a Local Administrator. So . . .
I should be able to switch the user to be a Limited user on the local machine and then make arrangements for him to run this program as an administrator. Now, does he run this program as a local admin or a domain admin?
I think I know the answer but I can't figure out how to set up a new local Admin on 50 different computers without having to go to 50 different computers. Is there a way?