A few months back, I had a user download a virus and ended up creating quite a problem on the network and we ended up getting blacklisted. Pain in the neck. Finally, after about a day and half, found the infected workstation and got the problem resolved.
About a month later, someone else got the cousin of the first virus and we started all over again. So now I have gone back and through the GPO setup most people as standard users. Works great up until there is an update (Windows, Java, 3rd Party software, etc.). Now I need to head over to their station and type in the admin credentials to allow the download. I was wondering on how do others handle this?
I eventually just thought, worst case, create and admin user account and have it disabled until needed. When someone has a legitimate download, activate and set a temp password. Once entered, I'll reset the password to some random set and disable the account again.
I was just figuring if maybe I'm just thinking too hard on this.