frequently-traveling users and their company-issued laptops

Gurus,

For you IT manager types working at large companies, what is your policy
regarding frequently-traveling users who have company-issued laptops - what
level of rights do you give them to their laptops? Do you make them local
administrators or what? If you do not make them local administrators - do
you make them call in a ticket everytime they want to install some software?

--
Spin

Jill
Thu Aug 31 00:57:02 CDT 2006


"Spin" <Spin@spin.com> wrote in message
news:4lmht1F2mkk1U1@individual.net...
> Gurus,
>
> For you IT manager types working at large companies, what is your policy
> regarding frequently-traveling users who have company-issued laptops -
> what
> level of rights do you give them to their laptops? Do you make them local
> administrators or what? If you do not make them local administrators - do
> you make them call in a ticket everytime they want to install some
> software?
>
> --
> Spin
>
>
>

Jill
Thu Aug 31 00:58:25 CDT 2006

Spin,

Depending on what OS your network is running, there are various ways that I
enable users to perform their job duties while out of the main office.
If you mainly use Windows Server 2003 and Windows XP, you are in luck.
Also, I never give a regular user admin rights to any box. If an
application is giving you problems, there is ALWAYS a work around (maybe a
.dll or .ini file needs higher permissions). All of my mobile users have
Power User rights. From my experiences that is sufficient.

Through the use of XP and Server 2003, Remote Assistance, Remote Desktop,
and Terminal Services make my life a whole lot easier. The Remote Desktop
Protocol, which is used by all three remote access methods; is pretty secure
(not completely secure), but pretty secure. Make the RDP port is open both
inbound on your firewall and you should have no problem. When using one of
the remote access methods, your help desk reps can quickly, easily, and
securing connect to the remote laptop and either fix or guide the remote
user to the resolution.



"Spin" <Spin@spin.com> wrote in message
news:4lmht1F2mkk1U1@individual.net...
> Gurus,
>
> For you IT manager types working at large companies, what is your policy
> regarding frequently-traveling users who have company-issued laptops -
> what
> level of rights do you give them to their laptops? Do you make them local
> administrators or what? If you do not make them local administrators - do
> you make them call in a ticket everytime they want to install some
> software?
>
> --
> Spin
>
>
>

Miha
Thu Aug 31 04:25:10 CDT 2006

Where I usually work -- they get their laptops pre-installed with all needed
(and company approved) software... This way there is no need for
administrative permissions.

--
Mike
Microsoft MVP - Windows Security

"Spin" <Spin@spin.com> wrote in message
news:4lmht1F2mkk1U1@individual.net...
> Gurus,
>
> For you IT manager types working at large companies, what is your policy
> regarding frequently-traveling users who have company-issued laptops -
> what
> level of rights do you give them to their laptops? Do you make them local
> administrators or what? If you do not make them local administrators - do
> you make them call in a ticket everytime they want to install some
> software?
>
> --
> Spin
>
>
>

Frankster
Thu Aug 31 08:26:55 CDT 2006

Make them local-only admins. This way they can change network card/wireless
settings as necessary when they travel. Also, often these folks will have
gadgets such as Palm Pilots or Blackberrys that need to be synced, etc.
Often these (stupid) programs require admin access to operate properly.

-Frank

"Spin" <Spin@spin.com> wrote in message
news:4lmht1F2mkk1U1@individual.net...
> Gurus,
>
> For you IT manager types working at large companies, what is your policy
> regarding frequently-traveling users who have company-issued laptops -
> what
> level of rights do you give them to their laptops? Do you make them local
> administrators or what? If you do not make them local administrators - do
> you make them call in a ticket everytime they want to install some
> software?
>
> --
> Spin
>
>
>

Jill
Thu Aug 31 15:50:53 CDT 2006

You can allow your users to operate those devices and synch without giving
them admin rights. Usually the program file directory, temp directory, or
%systemroot% directory needs read, write, or modify permissions; but hardly
ever Full Control or Admin rights. It is very dangerous to allow regular
users admin rights.




"Frankster" <Frank@SPAM2TRASH.com> wrote in message
news:89udnSClmPACfmvZnZ2dnUVZ_ridnZ2d@giganews.com...
> Make them local-only admins. This way they can change network
> card/wireless settings as necessary when they travel. Also, often these
> folks will have gadgets such as Palm Pilots or Blackberrys that need to be
> synced, etc. Often these (stupid) programs require admin access to operate
> properly.
>
> -Frank
>
> "Spin" <Spin@spin.com> wrote in message
> news:4lmht1F2mkk1U1@individual.net...
>> Gurus,
>>
>> For you IT manager types working at large companies, what is your policy
>> regarding frequently-traveling users who have company-issued laptops -
>> what
>> level of rights do you give them to their laptops? Do you make them
>> local
>> administrators or what? If you do not make them local administrators -
>> do
>> you make them call in a ticket everytime they want to install some
>> software?
>>
>> --
>> Spin
>>
>>
>>
>
>