Creating an exception for writing C: Drive

[Windows534]

Hello,
I work in an Windows 7 enterprise environment. We recently pushed forward the initiative to take away local admin rights on all company work-stations.
There are a few employee's that need the ability to "write to the C: drive" with certain programs and this is taken away when we remove local admin rights.

All our work-stations are tied to our domain. What are the possible workarounds to allow users to write to the C: drive? Should we create a group policy in AD DS or do we do it on a per user basis and create a permission with the local machine? Please reply with your thoughts! I posted this in Security because it had to do with taking local admin rights away.

Thank you to everyone who helps.

-B

 

[HarriePateman]

You could create a new security group in AD and only give the users who need the access, access.

You could also create a logon script so when the user logs on they are give the permissions.

 

[andrew129260]

A few things:

-is uac enabled? What setting?
-What kind of user group are they apart of? Standard user/limited user?
-What programs are they trying to open that require admin rights?
-What file directories do the programs need access to, where do employees need to save to?

More info is needed here please.