I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they can do. When you do not want to turn off UAC or make the user an Admin, what settings do you change to give them some basic access, but remain secure?
Some frustrations I've run into recently include:
- User is unable to install their home printer without admin rights
- User cannot remove a corrupted bluetooth keyboard connection without admin rights so they can remate the keyboard
- User cannot delete global shortcuts from their desktop
- UAC cuts off access through VNC connections when prompted for admin password
The above list can be expanded indefinitely. In general, what settings and permissions do you change to prepare laptops / notebooks for being on the road as a limited user where admin access is difficult at best?
As an admin, how do you satisfy the user's needs and make support easy when they are not in the office or a simple Remote Desktop connection away?