Login to participate
Security IdeasRSS
6
Group Rights for Limited Administrator Accounts Change All
KEG
August 27th, 2009
Filed under: Endpoint Protection (AntiVirus) - 11.x, Endpoint Protection (AntiVirus), Basics, Features, Security
8 Agree, 2 Disagree
Need the ability to change all group rights for a limited administrator account to Read Only, Full Access, or, No Access. We have over 100 groups and to manually change each group access to Read Only is too time consuming, especially since we have over 20 limited administrators. We have the option to do a change all to the appropirate rights level instead of being forced to manually change the rights level for each individual group. Maybe have the rights based on enheritance like the policies.
I completely agree!We have
I completely agree!
We have nearly 200 groups and over 150 limited administrators. It's a COMPLETE PAIN that everything defaults to Full Access. Especially since the SEPM Console is java based, it doesn't let a person even use the keyboard to navigate through the drop-down menus. In fact, it takes TWO CLICKS on each drop-down menu to make it work. Bad... bad... bad... bad design.
If an account is a "limited" admin, shouldn't it default to low security and we have to ENABLE the features they get (versus a normal admin where you assume they get everything)? That would make the most sense to me.
Jon
There is actually an
There is actually an unplublished fix for this that has been available for some time. When you setup or edit a limited admin's group rights if you right click on the SEP group name it will pop up a dialog box that will allow you to choose Set Full, Read Only, or No Access for that group and all sub-groups. Symantec needs to publish this feature in their Admin documents.
Thanks OSU-SYSMgr...
Thanks OSU-SYSMgr...
Regards,
Srinivas H.P.
HCL Infosystems Ltd
No kidding they need to
No kidding they need to publish that! Or even better yet, how about making it an option that's VISIBLE in the GUI.
Either way, thanks OSU-SYSMgr! You've just saved us a ton of time moving foward.
Jon
Would you like to reply?
Login or Register to post your comment.