Setting up administrative access in Windows 7

975 pts.
Tags:
Administrator account
Windows 7
Windows 7 Administration
Windows 7 Configuration
Windows Server 2003
Windows Server 2003 Domain
We have two groups of users. Execs and end users in a Windows Server 2003 domain. We want the execs to have full administrative access on the Windows 7 desktops. We want the end users not to have admin access. How can we set this up?
ASKED: March 16, 2011  7:36 PM
UPDATED: March 17, 2011  11:40 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

This definitely increases risks to the executive users! They are the ones who should really be more concerned most about security of the data and integrity of their systems. Paint the picture that malware is often restricted by the user’s authorization level, so by users using least user authority, then the malware is not capable of deeply infecting a system. Malware which affects systems where users have full authority to their systems can gain access to system areas and data that would be restricted to normal users. If these executives for some reason absolutely MUST have this type of access. Create two accounts, one for regular user authority and the other with elevated authorization. Caution them that the elevated authority account should ONLY be used when actions cannot be performed using the regular user account. Many companies do this configuration and are very successful with reducing the threats due to malware taking advantage of elevated user rights.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • IceCubbe
    Do your run a domain or workgroup pc`s, well if and most probably you have a domain this can be done via group policy, you can create 2 different gpo`s and applying then to 2 different OU`s whith your different user objects in each.
    1,385 pointsBadges:
    report
  • TeachMeIT
    [...] Wondering how to set up administrative access in Windows 7? Labnuke99 and IceCubbe have some [...]
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following