Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Windows XP Windows XP
Search Search
Search for:
Tech Support Guy > > >

Removing local admin rights on domain network


(!)

scs-04's Avatar
scs-04 scs-04 is offline
Member with 116 posts.
THREAD STARTER
 
Join Date: Jan 2005
Location: Michigan
Experience: Intermediate
31-Aug-2012, 04:00 PM #1
Removing local admin rights on domain network
I have a domain network with about 25 XP workstations. Currently they are all local admin users. We want to try to stop them loading unapproved software and other junk. Can I remove the local admin rights and just make them a standard user? If they are set as a standard user will the Windows Updates still install without entering an admin password?? Also, what about Java and Adobe updates? What is the best way to handle this?

thanks
DaveA's Avatar
Computer Specs
Trusted Advisor with 10,588 posts.
 
Join Date: Nov 1999
Experience: Beginner
31-Aug-2012, 08:42 PM #2
If I remember right, a Standard (Limited) User can not do any updates including Windows, Office, AV and other protection programs.
ETech7's Avatar
ETech7 ETech7 is offline
Member with 893 posts.
 
Join Date: Aug 2012
Experience: Advanced
01-Sep-2012, 02:14 AM #3
Using group policy you can remove all or logged-in user from local Administrators group and add domain admin to it. Windows updates runs as a system service so if fine with Windows deciding which updates to install you can just leave it as is. or you can (again through GPO) allow limited users to receive update prompts and act upon them without needing admin approval. Third party updates/installs will not be affected by that setting.
scs-04's Avatar
scs-04 scs-04 is offline
Member with 116 posts.
THREAD STARTER
 
Join Date: Jan 2005
Location: Michigan
Experience: Intermediate
03-Sep-2012, 11:14 AM #4
When you say third-party installs/updates will not be affected do you mean they will still install fine?
ETech7's Avatar
ETech7 ETech7 is offline
Member with 893 posts.
 
Join Date: Aug 2012
Experience: Advanced
03-Sep-2012, 12:24 PM #5
If they perform system wide changes - they'll require admin approval. Things which install into user's folder, like Chrome, will not need that.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑