hi, we have a bunch of windows 7 administrators who have to have local admin access to some hundert pcs with the same admin account. They all know the same password. (We do not have an AD, we have eDirectory) This is not so good because of security reasons. Now we could create a local admin account for each admin but this is somehow strange. I would like to know how you organize admin access to win 7 pcs in your environment? thx, hugo

For eDirectory ask in the Community forum here http://www.edirectory.com/forum/ I would vote for Active Directory in your environment. In AD you would work with groups that you create and that fit more precisely to global administrator management. Regards Milos

But what if you have network problems, then you MUST have local administrator accounts. The question is how you would manage this with the circumstances mentioned above.

Hi, I think you can create a a local admin account for each admin. If you think some of them dont need the administrator rights, you can use other groups such as Power User to limit their permission. For your reference: Default local groups Hope this helps Vincent Wang TechNet Community Support

Is there somewhere a good tutorial on how to assign specific admin rights to a group? Some of the admins do not need full rights. They should basically just be able to install and uninstall printers/scanner/.... and programs.

Hi, Please check whether this article will help you: User Rights Assignment - Add or Remove Users and Groups Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Hope this helps. Vincent Wang TechNet Community Support

Hi, Please check whether this article will help you: User Rights Assignment - Add or Remove Users and Groups Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Hope this helps. Vincent Wang TechNet Community Support