Vista UAC

  • Thread starter Thread starter KA Kueh
  • Start date Start date
K

KA Kueh

Dear all,

I am coming to terms with UAC and it does offer some security benefits but I
have an issue with it. I need to delegate support users "admin privileges".
Since all machine XP Pro and Vista Business are joined to a Windos 2003
domain, I just cannot assign these support personnel as members of
"Administrators". How can I allow support personnel enough admin privilege
but not too much in the domain? Thanks.

Regards,
Kueh.
 
Right off the bat, one answer that comes to me is to create an Active
Directory group for your field support folks and grant that group Local
Admin rights on every box in your network. But that would be an Active
Directory answer, not a Vista answer. :-)

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm
 
whos stupid idea was it to install Vista in a corporate enviornment?

I hope it was not you because you should be fired.
 
KA Kueh said:
Dear all,

I am coming to terms with UAC and it does offer some security benefits but
I have an issue with it. I need to delegate support users "admin
privileges". Since all machine XP Pro and Vista Business are joined to a
Windos 2003 domain, I just cannot assign these support personnel as
members of "Administrators". How can I allow support personnel enough
admin privilege but not too much in the domain? Thanks.
Click to expand...


Exactly the same way you did with XP.
 
Back
Top