danmcgov said:My company wants to remove my admin rights. I don't want them to
dummy down my PC. Is there any place that I can get a list of
things you can't do without Admin Rights.
My company wants to remove my admin rights. I don't want them to dummy down
my PC. Is there any place that I can get a list of things you can't do
without Admin Rights.
Jon Wallace said:See, I have to agree with Shenan here -
Firstly it's not really your PC - it's your companies PC and as such they
are within their right to do what they want with it. Locking down a PC,
especially in the corporate world is the only way PC's should be deployed
really as it would prevent a whole load of problems.
In essence, without admin rights, you can use the machine but you can't
manage it - meaning you can use software but not install or remove it, use
the network connection but not change it, use the printers, but not add new
ones (although in some circumstances you can with this).
I don't know where you work but you should also consider that this might not
be 100% your companies decision - organizations such as those in the finance
sector have legal requirements to lock down machines and as such don't
really have a choice.
These changes are coming my friend - my suggestion is you help them do it by
being positive instead of being one of the 'objectionists'. Your not going
to change it - but you can be seen to be helpful (or not) as a result of
this process.
Regards,
Jon
www.insidetheregistry.com
---
Thanks for the feedback. I have a number of reasons for wanting admin
rights. This may sound frivolous but for some reason my company turns off
Windows themes so I can't use the XP theme. Everything looks gray and runs
together. When you spend as much time as I do on your company, you want some
customization options.
Additionally, I end fixing a lot of my own problems then letting the Tech
Support group know how to fix it. If I can't even go into Device Manager,
which I could not when they turned admin rights off for a day, I feel like
all of the other 'dummys' who wouldn't know a dev mgr from pogo stick.
Jon Wallace said:See, I have to agree with Shenan here -Firstly it's not really your PC - it's your companies PC and as such they
are within their right to do what they want with it. Locking down a PC,
especially in the corporate world is the only way PC's should be deployed
really as it would prevent a whole load of problems.In essence, without admin rights, you can use the machine but you can't
manage it - meaning you can use software but not install or remove it, use
the network connection but not change it, use the printers, but not addnew
ones (although in some circumstances you can with this).I don't know where you work but you should also consider that this might not
be 100% your companies decision - organizations such as those in the finance
sector have legal requirements to lock down machines and as such don't
really have a choice.These changes are coming my friend - my suggestion is you help them do it by
being positive instead of being one of the 'objectionists'. Your notgoing
to change it - but you can be seen to be helpful (or not) as a result of
this process.
More bad advice from me - make yourself so annoying with needing
someone to come over to your PC, interrupt your work, interrupt their
work, have an admin log in, make them stay there until you are done,
check your work out, etc. If you do this a few times (maybe a lot),
they will either start to trust you and your ability more or maybe
fire you for being a PITA.
Demonstrate that if you had these rights, you can figure things out
for yourself and never bother anyone again. You will be able to
contribute to their technical support flunkies since you will know
more than they do. They will start to come to you for help instead of
the other way around.
If I have to work on a machine and catch it with an admin logged in, I
am likely going to ASAP create myself another admin account and not
tell anybody, or make yourself an admin. This takes what - 30
seconds? Configure it all later. It is not a "secret" - they could
find and delete it if they looked. Even if they periodically change
the admin passwords, you will always still have your "secret"
account. If you leave the place, maybe you will remember to delete
it. Thre are sneakier ways, and they can still keep you out of their
network stuff if they know how (maybe they don't).
The risk is they catch you and get mad or you screw something up so
bad they fire you. But your defense is you need this ability to do
your job effectively which is what they are paying you for. If you
can't do your job effectively, you are going to be bothering other
people every time something comes up you could fix if you had the
rights.
"Oh, can you please come to my machine and add a printer? Can you
come login so I can look at the Event Viewer? Can you come over and
create a folder here for me? I had to wait 30 minutes for somebody to
come over and run Task Manager!!!"
They will give you/adjust the rights just to keep you away. Maybe you
just need to be able to do some things. Tell them what they are.
Maybe not a full admin, but at least the basics. You show them how to
do it.
Jose said:More bad advice from me - make yourself so annoying with needing
someone to come over to your PC, interrupt your work, interrupt
their work, have an admin log in, make them stay there until you
are done, check your work out, etc. If you do this a few times
(maybe a lot), they will either start to trust you and your ability
more or maybe fire you for being a PITA.
Demonstrate that if you had these rights, you can figure things out
for yourself and never bother anyone again. You will be able to
contribute to their technical support flunkies since you will know
more than they do. They will start to come to you for help instead
of the other way around.
If I have to work on a machine and catch it with an admin logged
in, I am likely going to ASAP create myself another admin account
and not tell anybody, or make yourself an admin. This takes what -
30 seconds? Configure it all later. It is not a "secret" - they
could find and delete it if they looked. Even if they periodically
change the admin passwords, you will always still have your "secret"
account. If you leave the place, maybe you will remember to delete
it. Thre are sneakier ways, and they can still keep you out of
their network stuff if they know how (maybe they don't).
The risk is they catch you and get mad or you screw something up so
bad they fire you. But your defense is you need this ability to do
your job effectively which is what they are paying you for. If you
can't do your job effectively, you are going to be bothering other
people every time something comes up you could fix if you had the
rights.
"Oh, can you please come to my machine and add a printer? Can you
come login so I can look at the Event Viewer? Can you come over and
create a folder here for me? I had to wait 30 minutes for somebody
to come over and run Task Manager!!!"
They will give you/adjust the rights just to keep you away. Maybe
you just need to be able to do some things. Tell them what they
are. Maybe not a full admin, but at least the basics. You show
them how to do it.
Want to reply to this thread or ask your own question?
You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.