RE: Impact of removing administrative rights in an enterprise running XP

That's true, in some cases, but in many cases developers and testers
should also be running without admin privileges. When they are creating
user mode applications they can usually build and test with limited
privileges. They may need higher privileges when they are creating
system services, or installing their packaged application and of course
they'll need admin privileges for applications that will be loaded into
the kernal. Keep in mind that virtual machines may not work well if they
are working on hardware device drivers. 

-----Original Message-----
From: Donze, Erich [mailto:EDonze@miracosta.edu] 
Sent: Tuesday, August 08, 2006 1:13 PM
To: focus-ms@securityfocus.com
Subject: RE: Impact of removing administrative rights in an enterprise
running XP

The one piece I haven't seen addressed so far was the developers and
software testers, who have in the past had a justifiable argument for
administrative priveleges.  This can now be addressed by virtual pc or
vmware, and allowing administrative priveleges on a virtual instance.
It still has some of the dangers of allowing users to install their own
software on your internal network, but it does limit the support they
require when they make a severe mistake.  (Make a backup copy of their
virtual machine.)

---------------------------------------------------------------------------
---------------------------------------------------------------------------