 |
 |
No users run as Admin at all times. Desktops are treated differently than portables. For most of our desktops in-building, we try and not provide admin access to the user, as we are here to help with such problems. Portables give us problems, as users are frequently overseas and many time-zones away. When users are assigned their portable, they are assisted with setting their Administrator account password. Half forget we've done this for them, or forget the password (thank goodness). The admin's desktop background is intentionally annoying and has text that warns the "admin account". This is intended to serve as an obvious visual reminder so that a user doesn't forget and continue logging in as admin. There is another admin account made for our use. One of the more interesting things we've done along a similar vein is to use the ProfWiz utility to associate yet another user support account with the user's profile. This allows us to login as our "dummy user", but work on the real user's profile without knowing their password. It works for most profile-related problems, but fails with things that require authorization, as we aren't really that user, we are just using their profile (in other words, we can't see their Exchange mail, or access shares they are permitted to). This has been quite handy. Brian Hoort -----Original Message----- From: Richard Wiggins [mailto:[log in to unmask]] Sent: Monday, November 19, 2007 3:00 PM To: [log in to unmask] Subject: [MSUNAG] How do you manage Administrator access for your users? I'm curious how folks manage access to Administrator accounts.