Subscribe: Friends in Tech - Latest Comments in Upgrading a server - what would you do?
http://friendsintech.disqus.com/upgrading_a_server_what_would_you_do/latest.rss
Added By: Feedage Forager Feedage Grade B rated
Language: English
Tags:
admin  avoid  desktop  file  friends tech  friends  group  local admin  local  network  permissioning  remove  rights  upgrading server 
Rate this Feed
Rate this feedRate this feedRate this feedRate this feedRate this feed
Rate this feed 1 starRate this feed 2 starRate this feed 3 starRate this feed 4 starRate this feed 5 star

Comments (0)

Feed Details and Statistics Feed Statistics
Preview: Friends in Tech - Latest Comments in Upgrading a server - what would you do?

Friends in Tech - Latest Comments in Upgrading a server – what would you do?



Friends in Tech is an oxymoronic group of podcasters and bloggers — that is, we are a loose, but tight-knit alliance — individual, but still a group.



Last Build Date: Thu, 01 Feb 2007 11:51:35 -0000

 



Re: Upgrading a server – what would you do?

Thu, 01 Feb 2007 11:51:35 -0000

I think the first thing that comes to my mind is when you remove them from the Domain Admins (DA) group, they will more then likely lose their Local Admin (LA) privilages, as the DA group is part of the LA group on each desktop by default. Users may have been added to the DA group to avoid permissioning each desktop and granularly permissioning file shares.

If its a small enough network (sounds like it is if all resources are on one box) the best way, in my opinion, to avoid pain is to document file share permissions, script (or manually add) user additions to local admin groups, and remove them from DA group. Then you can spend some time going forward figuring out apps will break by then not having local admin rights and remove these rights going forward. It'll prove a more managable network to manage with desktop privililages reduced!

Thoughts, comments? Cheers!