"End users also need to be disabled from performing administrative tasks on their computers."
Anyone who says this hasn't tried it with a Windows machine. Way too many applications were written requiring admministrative privileges that have no need for them. This often includes important functions like antispyware and antivirus products. There are some complicated work arounds or things you can do with the run as command, but the bottom line is it is a *huge* pain in the ass, to the point of almost being unworkable.
I might be comfortable regularly typing in an admin password to do certain things, but there is no way I'll set it up for a family member like this. They would either call me every time it came up to ask what they should do, or default to typing in a password for everything, which is way too much extra work when it ends up defeating the purpose it was designed for.
Slashdot Mirror
"End users also need to be disabled from performing administrative tasks on their computers."
Anyone who says this hasn't tried it with a Windows machine. Way too many applications were written requiring admministrative privileges that have no need for them. This often includes important functions like antispyware and antivirus products. There are some complicated work arounds or things you can do with the run as command, but the bottom line is it is a *huge* pain in the ass, to the point of almost being unworkable.
I might be comfortable regularly typing in an admin password to do certain things, but there is no way I'll set it up for a family member like this. They would either call me every time it came up to ask what they should do, or default to typing in a password for everything, which is way too much extra work when it ends up defeating the purpose it was designed for.