Educause Security Discussion mailing list archives
Re: Local Admin Rights
From: "Jacobson, James" <JJACOB () MIDWESTERN EDU>
Date: Tue, 15 Mar 2005 08:37:22 -0600
At our campus, we have already implemented what you seek to do as part of our 98 to XP conversion. As computer administrators, we already had a pretty good idea of those who truly use the computer as a tool to further the University's academic goals vs. those who want to download webshots, screensavers, etc.. By default, all new XP installs are rolling out with standard user policies. The individuals who truly need administrative access (software program they use require it, we trust how they use the machine) are given admin rights to the local machine with the understanding that it may be revoked should problems arise. For the most part, we have not had any problems with this policy. We have always centrally administered our computer resources, and we have made it known that the PC's belong to the University and that the safety and security of the University's network and computer resources come before personal conveniences. James Jacobson Asst. Director, Computer Services Midwestern University -----Original Message----- From: The EDUCAUSE Security Discussion Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Brian Fetcie Sent: Tuesday, March 15, 2005 7:05 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Local Admin Rights Good Morning... ~ We are preparing a policy to remove local admin privs from the faculty and staff members. The primary justification being an attempt to lessen our vulnerability. I'm curious as to what other campuses are doing in regards to this issue. How did you handle the politics (i.e. the power user, or even average user, who are convinced they must have admin privs)? I'm interested in any experiences, the good, the bad and the ugly. Thank you in advance. Brian -- ------------------------------ Brian Fetcie Systems/Security Administrator -------------------------- SUNY Canton 34 Cornell Drive Canton, NY 13617 -------------------------- fetcieb () canton edu ------------------------------ ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Local Admin Rights Brian Fetcie (Mar 15)
- <Possible follow-ups>
- Re: Local Admin Rights Jacobson, James (Mar 15)
- Re: Local Admin Rights Michelle Mueller (Mar 15)
- Re: Local Admin Rights Gary Flynn (Mar 15)
- Re: Local Admin Rights Matt Kirchhoff (Mar 15)
- Re: Local Admin Rights Brian Fetcie (Mar 15)
- Re: Local Admin Rights Jeff Giacobbe (Mar 15)
- Re: Local Admin Rights Krulewitch, Sean (Mar 28)