|
Posted by Roger Abell [MVP] on July 27, 2005, 11:02 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> Hoping some people can offer some advice.
>
> We have recently taken all users out of the Local Administrators group
> on their PCs (not our choice but the powers that be). All users are now
> either Users or Power Users.
>
> This has become a nightmare in that we now need to log users of and on
> in order to make any changes. I am after some tips to help make this
> easier.
>
> Here is what I am utilizing so far:
>
> - Remote Assistance (XP Only)
> - "Run As" from installing some programs
>
> Is there any way to do the following without having to log on as an
> administrator on their PC?
>
> - Modify the registry
remote script run by a domain account that is admin on the target
machine or when local runas or via GPO
> - Run System Tools (eg Disk Defragmenter)
run them remotely over network using domain account that has
admin on the target or when local runas
> - Install programs
runas, or via software distribution with GPO, or ever with
hand crafted script
> - Modify the hosts file
>
change NTFS permissions of the hosts file
> We have limited access to a single group policy for our OU but at this
> stage no rights to create additional ones.
>
> Happy to hear any scripting solutions as well.
>
|