maybe i'm missing something

[pontifex]

all our PCs here at work have the administrator account with a password that is never given to the users. They users also have their own account on the PC.

My boss wants me to create another account on the PCs (same name for everyone) with admin rights but with different passwords for different departments.

I can't for the life of me think of why he wants to do this. I don't see any purpose to it.

 

[FoBoT]

sometimes people that don't understand security try to be proactive, to appear to be doing something about security

we did something equally silly a few years ago. then we stopped

 

[Platypus]

lol wow, talk about micromanaging.

 

[daveshel]

Maybe you are running an application that requires the user to be a member of the local administrators group. That would be one way (not the best way) to accomplish it.

 

[j00fek]

seems worthless idea to me

 

[pontifex]

Originally posted by: daveshel
Maybe you are running an application that requires the user to be a member of the local administrators group. That would be one way (not the best way) to accomplish it.

not that i'm aware of

these are all local accounts too btw, even the user's accounts. its stuff like this that makes no sense but requires a lot of time (70+ users, many who will not just give up their pc to allow me to do this). it will probably take me a few days to get to everyone.