Need to restrict admin rights in macOS?

[Ric Getter <ric.getter () PCC EDU>]

Group,
I'd like to get some opinions on the need to restrict Mac users on the
college staff (instructors, admin assistants, etc.) from having Admin
rights, considerign all the current built-in protections in the macOS
(System Integrity Protection, Gatekeeper, etc.).

Disclaimer:, I am not a security pro, though I have had a fair amount of
coursework in the field. My primary unofficial role here is as the
resident, elder Mac guru (a gray-hair who has been using them since '84).
I'm still involved with the group here responsible for district Mac
management who no longer have hands-on access to endpoint systems. I am
usually just a lurker here who likes to keep in touch with what's going on
in the higher-ed InfoSec world.

Thanks,
Ric

Ric Getter
PCC Media Production/PCC-TV
Portland Community College - Sylvania
971-722-8036

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community