My question should be simple. At my previous employer I was the Altiris admin, way back on v6.9. I've since changed employers and now work for a larger company. We use Altiris at my new job as well. In the initial rollout, every body had full access everywhere. Of course this had dire, and predictable, results. As an exam one of our techs upgraded Java on pc's and servers across 4 states, and there were other examples as well. As a result, all IT staff in our sites lost access to the Altiris Console, and only a limited amount of people in our corporate office have console access.
That team now has a new manager who is working through the process of returning some console access to the sites, which is good. He was told that the current version of Altiris doesn't have reasonable access controls. In v6.9, I was able to restrict I what techs could do what to which computers. We're on v8.1 now. We need to allow our staff on Los Angeles console access to only the computers in our Los Angeles office, and disallow them from doing anything to our New York office computers. I think he is getting bad information. Is he?