1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Removing local admin rights on domain network

Discussion in 'Windows XP' started by scs-04, Aug 31, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. scs-04

    scs-04 Thread Starter

    Joined:
    Jan 10, 2005
    Messages:
    116
    I have a domain network with about 25 XP workstations. Currently they are all local admin users. We want to try to stop them loading unapproved software and other junk. Can I remove the local admin rights and just make them a standard user? If they are set as a standard user will the Windows Updates still install without entering an admin password?? Also, what about Java and Adobe updates? What is the best way to handle this?

    thanks
     
  2. DaveA

    DaveA David Trusted Advisor

    Joined:
    Nov 16, 1999
    Messages:
    11,839
    If I remember right, a Standard (Limited) User can not do any updates including Windows, Office, AV and other protection programs.
     
  3. ETech7

    ETech7

    Joined:
    Aug 30, 2012
    Messages:
    893
    Using group policy you can remove all or logged-in user from local Administrators group and add domain admin to it. Windows updates runs as a system service so if fine with Windows deciding which updates to install you can just leave it as is. or you can (again through GPO) allow limited users to receive update prompts and act upon them without needing admin approval. Third party updates/installs will not be affected by that setting.
     
  4. scs-04

    scs-04 Thread Starter

    Joined:
    Jan 10, 2005
    Messages:
    116
    When you say third-party installs/updates will not be affected do you mean they will still install fine?
     
  5. ETech7

    ETech7

    Joined:
    Aug 30, 2012
    Messages:
    893
    If they perform system wide changes - they'll require admin approval. Things which install into user's folder, like Chrome, will not need that.
     
  6. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1067256