Opinion question about local administrators
Quick question to see what everyone thinks about this.
I know in the past people have told me that if we allow everyone to be local administrator on their machine it's a recipe for disaster.
My question is, what is the difference between making everyone local admin and setting every program on the machine to run as administrator?
Would one option be considered better or worse than the other?
In my head they seem like they would be similar, but the local admin would have a bit more ability.
Setting the programs to run as admin would mean they couldn't install things without our knowledge, right?