Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: Admin account in Windows with 'limited' access

Admin account in Windows with 'limited' access 2 years 10 months ago #38453

  • skylimit
  • skylimit's Avatar
  • Offline
  • Distinguished Member
  • Posts: 158
  • Thank you received: 1
  • Karma: 0
Hi guys,

We currently support remote users and have had the challenge of accessing their machines (via secure remote login)to do work because they're always busy. i was just wondering if it's possible to create a separate account on the end users laptop with admin rights but with no access to the users stuff on the laptop if this makes sense. The idea is to enable us access the machine using a separate (support) account when say the user is out for lunch, in order to install software, resolve any issues they may have etc. We prefer not to have to access to their stuff since they're away.

Anyone have experience with this please, also other recommendations appreciated.

thanks
"...you are never too old to learn" anon
The administrator has disabled public write access.

Re: Admin account in Windows with 'limited' access 2 years 10 months ago #38458

  • Bublitz
  • Bublitz's Avatar
  • Offline
  • Senior Member
  • Posts: 301
  • Thank you received: 3
  • Karma: 2
Once your admin you can always take ownership over any files. So even if you lock your self out permissions you can get right back in. If this is possible it would have to be via 3rd party.
The Bublitz
Systems Admin
Hospice of the Red River Valley
The administrator has disabled public write access.

Re: Admin account in Windows with 'limited' access 2 years 10 months ago #38464

  • Bublitz
  • Bublitz's Avatar
  • Offline
  • Senior Member
  • Posts: 301
  • Thank you received: 3
  • Karma: 2
Hate to sound like a skitzo. In my environment none of my users have admin rights. I do give admin privileges to certain activities via Desktop Authority. I have been using this program for years it works great and new "activities" can be pushed out via GPO.

So you could make the users non admins but allow them to do some admin tasks. Since they aren't a true admin they cannot take ownership of files.

So I guess i'm going to correct myself, and say this is a possible solution to your problem.
The Bublitz
Systems Admin
Hospice of the Red River Valley
The administrator has disabled public write access.
Time to create page: 0.074 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup