Allow Windows network access, but not admin rights

How can you grant Windows network access without giving users administrator rights and posing a threat to Microsoft security?

How can I grant a user Windows network access without giving him administrator rights?
One of the common misconceptions when it comes to Windows network access is that users must be granted administrator rights. In most cases, that's not true. The easiest way to ensure that a user does not have administrator rights is to make sure that he is not a member of either the domain "Domain Admins" group or the local Administrators group -- and that he's not a member of any other group that is a member of those two. As long as you ensure the above, the user can access the network and network resources, but will not have administrator's rights.
This was first published in September 2007

Dig Deeper on User passwords and network permissions



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: