I'm trying to find a solution for a developer who needs to install software on two Windows servers about twice a week, but I want to take away his admin rights. I'm considering creating a local admin account for him to use only when prompted by UAC, but I want to prevent this account from logging in regularly. Is that possible? If not, is there a way to enable him to install the software without giving him full admin access? It's important that he can handle installations independently, but we also need to prevent him from shutting down or rebooting the servers, as that has caused issues before. I'd love to hear any suggestions!
1 Answer
I typically set up separate admin accounts from regular user ones. If a developer ends up misusing their admin privileges, I document the incident and inform the IT director. If it keeps happening, we revoke their access. Sure, this might slow down their work a bit since they have to rely on helpdesk for admin tasks, but usually, the lesson is learned after a few weeks!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures