Posted on Monday, October 04, 2004 1:12 AM
Well, I have now basicly given up the use of sysadmin privilege as default, resolving to use admin rights only when needed.
In order to actually acomplish this best-practice behaviour, my resource is primairily Aaron Margosis' blog, and some of the tools he has published there.
And on top of this, I have switched my primairy user account for my laptop to a domain account on my home domain. The reason for this is to familiarize myself more with all the issues one can encounter as a mobile user in an enterprise, so I wanted to simulate that situation. Apart from that, it also allows me to make use of the handy kind of features Microsoft builds into enterprise technologies to make working in this way easier. I am of course refering to roaming user profiles, folder redirection, offline file syncronisation and the like. I will not be forced to really dig into this stuff, in order to get around any problems my rather extensive use will probably make my face.
And the same of course goes for running as a standard user, but still needing to do a lot of administrative tasks. Already I have been digging into RunAs, Explorer command line switches, Tokens, the way process interact and run, that kind of stuff. Its gonna force me to gain a far deeper understanding of the inner workings of Windows than I currently have, and thats a good thing.
I'll be posting about the things I run into, as I face them.