Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
Impact of removing administrative rights in an enterprise running XP Jul 27 2006 01:53PM
Drew Simonis (simonis myself com) (4 replies)
RE: Impact of removing administrative rights in an enterprise running XP Aug 15 2006 10:14PM
Kevin Hegg (kevinhegg moturion com)
RE: Impact of removing administrative rights in an enterprise running XP Jul 27 2006 04:36PM
Howe, Paul H (paul howe nwa com)
18,000 PC, < 500 users with local admin (nearly all of them IT)

Prerequisite:

Need to have a software distribution solution,
Need to have a Field Support organization for hardware support.
Need to define "roles" for users/workstations and deliver software as
appropriate.

Most important:
Need to have business IT units "own" their applications and >>
participate << in regression testing (e.g. MS patches)

On the plus side, you don't end up with...
- 5 version of product X,
- thousands of rouge software product and
- the attendant licensing issues,
- unexpected interactions,
- support calls on unsupported software
- fewer spyware/malware infections, fewer viruses in general

You end up with fewer support calls, as you have more control of your
environement.

But the prerequisites are important. You probably can't be successful
without distribtion, roles, and Business IT unit buy-in. The Business
units need to step up and admit to, and OWN their applications.

Ownership means - defining packaging (install options), version
management, regression testing, supported configs, etc.

> -----Original Message-----
> From: Drew Simonis [mailto:simonis (at) myself (dot) com [email concealed]]
> Sent: Thursday, July 27, 2006 8:54 AM
> To: Focus-MS
> Subject: Impact of removing administrative rights in an
> enterprise running XP
>
> Hello all,
> I wonder if anyone on the list who might work for a good
> sized enterprise (10,000+ seats) has gone through the
> excercise of removing administrative rights from the user community?
>
> Aside from the effort to inventory all applications and
> ensure that they work with restricted permissions, I forsee
> that such an effort would likely require changes to the
> entire support model. Instead of relying on users to install
> their own software, it would need to be done for them. New
> hardware would require intevention, etc.
>
> If someone has completed this, was support a major new
> burden, or was it not as difficult as it might be? If it
> was, how much of a burden was it (+ desktop support
> headcount? +helpdesk calls?)?
>
> -Ds
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> -------------
>
>

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]
Re: Impact of removing administrative rights in an enterprise running XP Jul 27 2006 03:14PM
Saqib Ali (docbook xml gmail com)
Re: Impact of removing administrative rights in an enterprise running XP Jul 27 2006 03:08PM
Jon R. Kibler (Jon Kibler aset com) (4 replies)
Re: Impact of removing administrative rights in an enterprise running XP Jul 28 2006 12:53AM
Ansgar -59cobalt- Wiechers (bugtraq planetcobalt net)
RE: Impact of removing administrative rights in an enterprise running XP Jul 27 2006 08:49PM
McLaurin, Timothy (tMcLaurin citi-us com) (2 replies)
RE: Impact of removing administrative rights in an enterprise running XP Jul 28 2006 03:39AM
Tom Milliner (tomm dfwrealtors com) (1 replies)
RE: Impact of removing administrative rights in an enterprise running XP Jul 28 2006 01:48PM
Miha Pihler (Miha Pihler snt si)
RE: Impact of removing administrative rights in an enterprise running XP Jul 27 2006 09:44PM
Robert D. Holtz (robert d holtz gmail com) (1 replies)
Re: Impact of removing administrative rights in an enterprise running XP Jul 28 2006 03:23PM
Thor (Hammer of God) (thor hammerofgod com)
Re: Impact of removing administrative rights in an enterprise running XP Jul 27 2006 06:36PM
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (sbradcpa pacbell net)
RE: Impact of removing administrative rights in an enterprise running XP Jul 27 2006 06:30PM
Laura A. Robinson (larobins bellatlantic net)







 

Privacy Statement
Copyright 2009, SecurityFocus