I'm a big believer in principle of least permissions. AD includes several built-in levels of administrative permissions, and allows creation of many more through Delegation and Group Policy.
PC Monitor makes every user an uber-admin, because it runs as LocalSystem, one of the most powerful accounts in a system.
I'm a one-man shop at this point, but hope for big growth when I'm in production. There will come a time, possibly fairly soon, where I will no longer be able to use PC Monitor because it does not allow me to properly secure the system.
I'd like for PCM to impersonate users, and use AD to determine what they are permitted to do, which servers they're permitted to control, etc.
This is a non-trivial request, and I'm sure it will take a while to get done. Hope PCM gets there by the time I need it!
(Now, watch Marius respond, "That will be in version 3.0, next week.")
I'm a big believer in principle of least permissions. AD includes several built-in levels of administrative permissions, and allows creation of many more through Delegation and Group Policy.
PC Monitor makes every user an uber-admin, because it runs as LocalSystem, one of the most powerful accounts in a system.
I'm a one-man shop at this point, but hope for big growth when I'm in production. There will come a time, possibly fairly soon, where I will no longer be able to use PC Monitor because it does not allow me to properly secure the system.
I'd like for PCM to impersonate users, and use AD to determine what they are permitted to do, which servers they're permitted to control, etc.
This is a non-trivial request, and I'm sure it will take a while to get done. Hope PCM gets there by the time I need it!
(Now, watch Marius respond, "That will be in version 3.0, next week.")