We currently support remote users and have had the challenge of accessing their machines (via secure remote login)to do work because they're always busy. i was just wondering if it's possible to create a separate account on the end users laptop with admin rights but with no access to the users stuff on the laptop if this makes sense. The idea is to enable us access the machine using a separate (support) account when say the user is out for lunch, in order to install software, resolve any issues they may have etc. We prefer not to have to access to their stuff since they're away.
Anyone have experience with this please, also other recommendations appreciated.
"...you are never too old to learn" anon
Re: Admin account in Windows with 'limited' access
5 years 2 months ago #38458
Hate to sound like a skitzo. In my environment none of my users have admin rights. I do give admin privileges to certain activities via Desktop Authority. I have been using this program for years it works great and new "activities" can be pushed out via GPO.
So you could make the users non admins but allow them to do some admin tasks. Since they aren't a true admin they cannot take ownership of files.
So I guess i'm going to correct myself, and say this is a possible solution to your problem.
Hospice of the Red River Valley