WorkStation Policies and Local Administrator for Normal users.

Our IT group rolls out network and desktop policies to our CAD Workstations almost on a weekly basis. Usually to restrict what a user can and cannot do.

For example normal users cannot access Folder Options under Windows Explorer, Nor can users add/remove software, nor can they see C drive. but it goes deeper than this into things such as registry changes by applications, and folder access by applications and the user. Also running VB Scripts.

We have found in the past with V8 that we had to implement adding the local user to the Local Administrators group on the machine they work on.

This would be for Windows XP and Windows 7 with V8i.

So I am wondering if anyone else has had this issue with regards to IT policy restrictions and requiring Local Administrative settings to be added for the user?

 

  • What is it about support groups, (not just IT),  that seems to cause them to behave as if they are the reason for the existence of a company or agency, rather than the service or product the company or agency provides?  Somehow the support group achieves a "first class citizenship" status while the employees who actually provide the service or product become "second class" (if even that).