Vista UAC

K

KA Kueh

Dear all,

I am coming to terms with UAC and it does offer some security benefits but I
have an issue with it. I need to delegate support users "admin privileges".
Since all machine XP Pro and Vista Business are joined to a Windos 2003
domain, I just cannot assign these support personnel as members of
"Administrators". How can I allow support personnel enough admin privilege
but not too much in the domain? Thanks.

Regards,
Kueh.
 
R

Richard G. Harper

Right off the bat, one answer that comes to me is to create an Active
Directory group for your field support folks and grant that group Local
Admin rights on every box in your network. But that would be an Active
Directory answer, not a Vista answer. :)

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm
 
J

John Smith

whos stupid idea was it to install Vista in a corporate enviornment?

I hope it was not you because you should be fired.
 
K

Kerry Brown

KA Kueh said:
Dear all,

I am coming to terms with UAC and it does offer some security benefits but
I have an issue with it. I need to delegate support users "admin
privileges". Since all machine XP Pro and Vista Business are joined to a
Windos 2003 domain, I just cannot assign these support personnel as
members of "Administrators". How can I allow support personnel enough
admin privilege but not too much in the domain? Thanks.


Exactly the same way you did with XP.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top