Enterprise Server Strategies for the CIOMy users sometimes have to install applications and do other things (i.e.
install/uninstall printers) that, in spite of what Microsoft says, "power users" permissions don't
work for. So we end up having to give the local users administrative permission to their machines.
When a machine may have more than one user, the permissions issue gets difficult to manage. Are we
doing something wrong to cause power users not to have adequate permissions? Or is giving local
admin permissions the best we can do?
Requires Free Membership to View
Learn how to use Security Templates and Security Configuration and Analysis. These tools allow
you to poke a few holes in to file system and registry key permissions so that Power Users can get
the job done without adding them to the local Administrators group. You can apply the compatibility
template to open the system up, for example. And, yes Virginia, you're not crazy. I have the same
experience and so does every other IT professional. It's not as much an issue with Windows as it is
with programs and device drivers that don't play well with Windows 2000 and Windows XP. See Help
for more security templates; they're easy to implement and deploy.
This was first published in May 2002
Join the conversationComment
Share
Comments
Results
Contribute to the conversation