Work for large government agency that is migrating from WSS 2.0 to MOSS/WSS 3.0 with 5000+ employees and small SharePoint staff. Due to continual changes (new/retiring employees, office/division reorganizations...) the monitoring of 5K employees permissions is not feasible by our web staff.
The problem we are having now, and will continue to have, is employees being given Admin rights to add/remove users for their site which also means they can open up pages in a web editor. Unfortunately, by default, giving a user Administrator rights automatically gives them the ability to open up pages in a Web Editor causing problems when we have employees, with absolutely no web skills, opening a page in a web editor and deciding to show us their "advanced web skills", causing problems that sometimes cannot be fixed.
When migration is complete, all employees will be given access to WSS ONLY. Web Services will have access to both WSS and MOSS.
Is there any way to set up WSS so that a WSS Administrator user cannot open up the page in a web editor by either disabling the web editor ability property another way or setting up WSS so that no body can be assigned Admin rights and a Power User Group created to Add/Remove people with no access to web editor (disabling individual web editor property on Admin user group does not work - cannot have one without the other).
I hope this makes sense.