Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Administrative Privelages Issue

29 Nov 2010   #1
askWinters

Windows 7 64bit
 
 
Administrative Privelages Issue

Dear Windows 7 IT Community,
Please comment only if you are a seasoned system administrator. That being said, our office is configured with Windows 7 64 bit workstations, Public Firewall settings and Symantec Endpoint Protection. Users log in as local standard users. I keep getting complaints that the users would like to administrate their own machines and would like an administrative account in addition to their standard user account to run updates, install software, etc. Despite being standard users and having to call IT for support with 3rd party software updates, and installs, we have had a few minor virus/trojan incidents. Running the AV full scan removed them.
As the IT admin, I feel safer if the users did not have administrative abilities even though it would be a separate account. I wanted to ask your professional opinion on this.
Thanks


My System SpecsSystem Spec
.
29 Nov 2010   #2
brady

 

Keep them off of Administrative privledges if you have the chance... Once users' have been spoiled with privledges it will be a battle taking them away again.

Software installs can be published through GPO, so they shouldn't be calling for installations that much.
Updates (win or 3rd party) can all be processed through GPO or WSUS as well.

Any virus or malware, as I'm sure you are aware, will do 100x times the damage to the machine/network if the user is an admin... If the user needs rdp access, move them to "Remote Users" group instead of Standard.
My System SpecsSystem Spec
29 Nov 2010   #3
askWinters

Windows 7 64bit
 
 

Yes, brady you are right, once privelaged, it is hard to take them away. That is why we are having the debate acutally

Can you please restate your argument taking into consideration there is no AD (yet), only local accounts. I'd like to hear your opinion and perhaps some documentation to back it up so that I can use it at the team IT meeting.
My System SpecsSystem Spec
.

29 Nov 2010   #4
askWinters

Windows 7 64bit
 
 

Also, they do not want to be logged in as admin as it states in question. They want to be able to run the updates for third party software and periodic software installs...
My System SpecsSystem Spec
29 Nov 2010   #5
brady

 

Without running in a domain environment (hopefully you have only a handful of computers in this setup), my setup of the machines would differ in the following ways:

Create a working image with all software suites pre installed (this should reduce the need of 3rd party installations) - All work related installations should be done to the image and not the machine(s).

3rd party updates can be done via login scripts stored in the "Startup folder" or tsk scheduler to runas local admin when they first login... these scripts will launch the program with administrative privledges to allow the updates.
My System SpecsSystem Spec
30 Nov 2010   #6
mckillwashere

Windows 7 x86/x64, Server 2008r2, Web Server 2008
 
 

As Brady stated, the user is more dangerous than any virus can be.
This is because the user can instal malicious software as well as leak the password not thinking its important or night at the local pub. (with the password god know what can happen from there)

Brady also had a good idea with the runas set up for the updates.
My System SpecsSystem Spec
Reply

 Administrative Privelages Issue




Thread Tools




Similar help and support threads
Thread Forum
Permissions issue on administrative account with some exe files
Hi, I'm a complete computer illiterate so please forgive my ignorance. I had a fault with my browser Firefox saying it was running but not responding and had to be closed or rebooted before opening however it wasn't in the task manager list. The reboot didnt rectify the problem. I 'end...
General Discussion
Administrative Rights Issue
I am trying to extract a Zip file program to a scripts folder for a plugin to my Elements 10 program. Should be a slam dunk but I am being told I cannot do this because there is an Administrative Rights issue. I am the Administrator. After researching this, I went to each level of the Elements...
General Discussion
My administrative account is not allowing administrative priveleges
Hi, I just completed a factory reinstall of my HP Computer, 64-bit, Windows 7. I only created one user account at the prompt, as the computer was setting up. I've made sure that the account is listed as having "administrator". However, after installing a number of programs onto my...
General Discussion
administrative privileges
when attempting to install/uninstall software get message that I don't have "administrative privileges' - I am the administrator
Software
administrative vulnerability
hi guys i need help fix dis problem is my computer at risck ?? also is there a way to fix dis problem????? http://i34.tinypic.com/dgrwjr.png
System Security
Administrative powers in W7
Hi I'm running a personal administrator account and everytime that I try to unzip files to the main drive it says it always fails. But when I unzip it into the desktop the unzip works. So what I do is unzip my files to the desktop and then copy paste then into programfiles so just it'll work....
General Discussion


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 18:44.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App