Educause Security Discussion mailing list archives

Re: Peeling off desktop Administrator Rights


From: "Iovino, Gabriel G" <giovino () INDIANA EDU>
Date: Mon, 7 Dec 2009 13:40:26 -0500

"we removed Admin from most users and replaced that with a connection to Power User group which provided a fair amount 
of privilege without giving away the store"

I am sure this has been mentioned before but everyone that plans to place their users in the "power users" group to 
reduce system privileges should read this article by Mark Russinovich. 

The Power in Power Users
http://blogs.technet.com/markrussinovich/archive/2006/05/01/the-power-in-power-users.aspx

Gabriel Iovino


 

Current thread: