By submitting your personal information, you agree that TechTarget and its partners may contact you regarding relevant content, products and special offers.
My users sometimes have to install applications and do other things (i.e. install/uninstall printers) that, in spite of what Microsoft says, "power users" permissions don't work for. So we end up having to give the local users administrative permission to their machines. When a machine may have more than one user, the permissions issue gets difficult to manage. Are we doing something wrong to cause power users not to have adequate permissions? Or is giving local admin permissions the best we can do?
Learn how to use Security Templates and Security Configuration and Analysis. These tools allow you to poke a few holes in to file system and registry key permissions so that Power Users can get the job done without adding them to the local Administrators group. You can apply the compatibility template to open the system up, for example. And, yes Virginia, you're not crazy. I have the same experience and so does every other IT professional. It's not as much an issue with Windows as it is with programs and device drivers that don't play well with Windows 2000 and Windows XP. See Help for more security templates; they're easy to implement and deploy.