Staff Laptops and Local / Domain Accounts

[neilault]

We provide staff with laptops for use at home and also within the College. We provide them with a local administrator account and also they have their own domain accounts.

Do you do similar and do you allow them to use the local accounts within the College or force them to login to the Domain and provide support and services that way? Also do you provide local accounts with admin rights or just limited?

Just interested as we are looking at pushing a recommendation to SLT that all staff use Domain accounts when onsite and that local accounts are set back to limited.




Neil

[ajs]

Except for a small handful, all staff with laptops are forced to use their domain logons using cached credentials. They are often reminded that the laptop will only cache one set of details so they need to make sure that they log back in as soon asd possible if they let someone else use their laptop. They're also given local admin rights through Group Policy so they can install their own printers and other peripherals but are also aware that software installs will be monitored and checked regulaly to make sure nothing is installed that shouldn't be.

Access to Add/Remove Programs is disabled to ensure they don't easily or accidentally uninstall anything major like Office.