How do manage your workstations?

[Guest]

It is ideal for network administrators to have all workstation setup so that
users are logon as regular users (not power user, not administrator). The
main problem I have when doing this is when it is time to upgrade an
application programs, or a device (such a network printer) needs to be added.
For the most part these functions require a local administrator rights.
Therefore I have to logoff the regular user, then I logon as local
administrator so I can update programs or add-in devices. That’s no big deal
if I’m just doing a handful of workstations. However, if there are hundreds
of workstations involved, it’s really time consuming!

For now, I just make everybody a local administrator on their own
workstation. That way the users can do program updates, add devices, etc.
However this presents a serious problem when users begin to play around and
install authorized programs and altering system settings.

I just wonder what other IT professionals are doing to mitigate this
problem. Maybe there is remote installation system that push program updates
(or installation) to the workstation and that system logons on as domain
admin (which is local admin by default).

Are you a network administrator? What do you do? I love to hear your story.

 

[Gary]

If you are using a domain controller then you can setup group policys in the
active directory to lock down settings like changing the ip address or
display properties etc.

 

[Guest]

Even though I am not a network administrator, I have worked with some servers
before. And, yes, depending what server os you are running, there is Remote
Installation Services (RIS). Click the link below for more information:

http://technet2.microsoft.com/WindowsServer/en/Library/c62e5951-5eb9-42f1-95ae-490e5d7a55511033.mspx

Hope this helps,
-Chris

 

[Bruce Chambers]

It is ideal for network administrators to have all workstation setup so that
users are logon as regular users (not power user, not administrator). The
main problem I have when doing this is when it is time to upgrade an
application programs, or a device (such a network printer) needs to be added.
For the most part these functions require a local administrator rights.
Therefore I have to logoff the regular user, then I logon as local
administrator so I can update programs or add-in devices. That’s no big deal
if I’m just doing a handful of workstations. However, if there are hundreds
of workstations involved, it’s really time consuming!

I find it awfully hard to believe that you have hundreds of computers
in a workgroup. That must be an excrutiatingly slow network, as the
optimum workgroup size is 10 to 12 workstations. Why does your
employer's IT department not create a domain? Among other things, a
centrally controlled domain would greatly facilitate the installation
and upgrade of member workstations. Your IT department should be able
to explain this to you.

For now, I just make everybody a local administrator on their own
workstation. That way the users can do program updates, add devices, etc.

Ouch...


However this presents a serious problem when users begin to play around and
install authorized programs and altering system settings.

Too true. Only grant users local admin privileges if your employer can
afford to double the support staff.

I just wonder what other IT professionals are doing to mitigate this
problem. Maybe there is remote installation system that push program updates
(or installation) to the workstation and that system logons on as domain
admin (which is local admin by default).

Well, let's see. There's SMS, WUSS, RIS, DameWare, Novell's ZenWorks,
Altiris, etc. Again, your IT department will have professionals trained
in these matters; consult them.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Is life so dear or peace so sweet as to be purchased at the price of
chains and slavery? .... I know not what course others may take, but as
for me, give me liberty, or give me death! -Patrick Henry

 

[Guest]

I'm sorry, I did not mention that we have a domain. We have activice
directory on Windows 2000 (but will upgrade to Windows 2003 after the tax
season because we are a CPA firm).

 

[Bruce Chambers]

I'm sorry, I did not mention that we have a domain. We have activice
directory on Windows 2000 (but will upgrade to Windows 2003 after the tax
season because we are a CPA firm).

Ah.... Then your network administrator will know how to implement
central management of your workstations, to include remote installation
of applications and patches/updates. You should consult him/her for
details.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Is life so dear or peace so sweet as to be purchased at the price of
chains and slavery? .... I know not what course others may take, but as
for me, give me liberty, or give me death! -Patrick Henry