1
vote
1answer
516 views

What are pros and cons of keeping a local administrator account in Windows 7 workstations in a domain?

We have a network with Windows 7 Enterprise machines, all members of a domain. We've been keeping a local (unlocked) 'Admin' account on each workstation in parallel to the built-in (locked) ...
0
votes
1answer
744 views

Remove local accounts but leave domain accounts in local administrators?

I'm trying to rename the local administrator account on all the PCs in a 2003 domain. The GP I have that uses GPP to rename the local administrator seems to work. However the problem I'm having is ...
0
votes
1answer
189 views

Local Security Policy blocking non Local Admins from Accessing machine.config

I have a few machines that for some reason won't allow the user (domain user, local user, etc.) the access the machine.config file in the v[.NETversion#]/CONFIG folder. I want to modify the ...
0
votes
2answers
299 views

Change local time on XP box - local admin but group policy restricts time change

I am a developer in need of doing some temporal unit testing on my local XP box. I am local admin but there is a group policy enforced centrally that prohibits changing local time (a severe case of ...
5
votes
10answers
2k views

How do you lock down workstations and still support legacy applications that require local administrator rights?

I know we all struggle to strike a balance between keeping our user's workstations locked down but still usable. I have a real problem with one client whose users are constantly installing toolbars, ...