Rights of domain users on local computers

[Pavel Zacha]

We plan to implement Windows 2000 Active Directory.
Our developers are used to having high access rights on their local computers (writing to registry, writing to filesystem) .
After login as domain user (member of Domain Users Group with standard group policy) user can't write to registry or some part of the filestem on the user's comupter (their part of Documents and Settings).
How can I increase their access rights to their local computer ?
What are recommended "best practices" ?
(We use W2K, WXP and W98 on our local computers).

Thank you in advance for your advice.

Pavel Zacha

 

[Chriss3]

Hello Pavel Zacha

i think the best thing is to make them local administrators, give them
rights as administrators at there local computers.

Start-> Settings -> Control Panel -> User Accounts --> "Click on the button"
Add "Type the username of an developer" Next "at this screen you can chose
to add this user to a member of local administrators"

//Christoffer Andersson

We plan to implement Windows 2000 Active Directory.
Our developers are used to having high access rights on their local

computers (writing to registry, writing to filesystem) .

After login as domain user (member of Domain Users Group with standard

group policy) user can't write to registry or some part of the filestem on
the user's comupter (their part of Documents and Settings).

 

[Jimmy Andersson [MVP]]

I don't like it when users have local admin rights, it's too risky if they
can install whatever they want...
I would install VPC (Virtual PC) on their machines. If they want to develop
and test stuff they shouldn't be in the same forest as the production
environment.

Just my 2 cents....

Regards,
/Jimmy