RE: Removing administrative rights [help Required]

[<adisegna () siscocorp com>]

I run into this problem a lot with software like QuickBooks. Have you
tried making the user a member of the Power Users group? I would try
that first. If that fails I give the user account modify rights to the
directory where the app is installed. Now, keep in mind that this
doesn't always work. Some software vendors aren't up to speed with the
Windows architecture and install a bunch of files that need modification
in the system folder. 

I agree 100% users should not have admin rights to their computers. I
don't even allow my admins administrator rights. I give them the local
admin password and tell them to use RunAs.

Thanks

AD
Information Technology Group
Security Identification Systems Corporation
 

-----Original Message-----
From: TOSE [mailto:imranfbhatti () gmail com] 
Sent: Friday, March 04, 2005 7:55 AM
To: security-basics () securityfocus com
Subject: Removing administrative rights [help Required]

Hi All,

I have a small Security concerns regarding giving Administrative
rights to the domain users ( on there local PC)

Some of my application like Autocad etc. are not running without
administrative rights.
So We have to add the users to the local administrators group for
running these applications


Is there any method or way to remove this method. ?

I want to remove this practise and want Pc users have minimum
previlaage for running the applications.

Please Help me
Best Regards

TOSE