How to control user access rights on a large scale?

[StuartP]

I have LogMeIn installed on a large group of domain joined computers. I want anyone who has access to logmein to be able to start a remote control session to these computers but not necessarily be admins. I would like to do this without having to go back and add BUILTIN\Users as having this access manually across a large number of computers through the individual computer dashboards.  Host configuration packages don't cover access control. Is there any way to control this via registry, group policy, command line?

[StuartP · Accepted solution]

I've found how to do this. When you add permissions to a specific user or group registry keys are created at HKLM\SOFTWARE\LogMeIn\V5\Permissions as well as some sub folders. I exported those keys and deployed them to all the other computers with a One2Many task.

[tnmm]

Finding this 2+ years later. I can't thank you enough. It's a shame GoTo haven't implemented this yet and we have to find workarounds like this.

[StuartP]

And I love you random citizen. As a bonus, I distinctly recall calling GoTo Support at the time who told me there was no way to do this.

[joseph1234]

To control user access rights on a large scale effectively: Use Role-Based Access Control (RBAC): Define roles based on job functions and assign permissions to these roles rather than individual users. Implement an Identity and Access Management (IAM) System: Utilize IAM tools to automate and manage access rights, ensuring consistency and ease of administration. Apply the Principle of Least Privilege: Grant users the minimum level of access necessary for their job to reduce security risks. Regularly Review and Audit Access Rights: Periodically review user access rights to ensure they are up-to-date and aligned with current roles and responsibilities. Automate User Provisioning and De-provisioning: Use automation to quickly add or remove access rights as employees join, move within, or leave the organization.