admin rights

[Joe]

If you try to lock your users down by not giving the local Administrator
rights, nut then give them full control to the root of the c drive did you
just knockout the benefits of no admin rights or is there still some
benefit?

 

[george]

If you try to lock your users down by not giving the local Administrator
rights, nut then give them full control to the root of the c drive did you
just knockout the benefits of no admin rights or is there still some
benefit?

Having full control permissions to the root of the c drive does indeed
knockout *some* of the benifits of not having admin rights.
They can read/write/delete anywhere on the disk, but that's all.
There's more.
Certain specific actions can only be achieved (executed) when having admin
rights.
Access to the registry for installing stuff is largly reserved to those
having admin rights.

So, just have full file system possibilities is not all that usefull by
itself.

hth

george