Allow Windows network access, but not admin rights

Allow Windows network access, but not admin rights

How can I grant a user Windows network access without giving him administrator rights?

    Requires Free Membership to View

    When you register, you’ll also receive targeted alerts from my team of editorial writers and independent industry experts with the latest news, tips, and advice to help you do your job more efficiently and effectively. Our goal is to keep you informed on the hottest topics and biggest challenges faced by IT professionals today working with desktop management and security technologies.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchEnterpriseDesktop.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseDesktop.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

One of the common misconceptions when it comes to Windows network access is that users must be granted administrator rights. In most cases, that's not true. The easiest way to ensure that a user does not have administrator rights is to make sure that he is not a member of either the domain "Domain Admins" group or the local Administrators group -- and that he's not a member of any other group that is a member of those two. As long as you ensure the above, the user can access the network and network resources, but will not have administrator's rights.

This was first published in September 2007