Hey everyone! I'm curious about how different workplaces handle local administrator privileges. Do you allow employees to have local admin rights on their computers? I'm considering advocating for the removal of these rights at my workplace and would love to hear your thoughts on this. Thanks!
6 Answers
I've worked in places where no one has local rights at all, except for IT. We elevate privileges only when necessary and have clear policies about it. Major companies often do this for security reasons.
A lot of places, including ours, don’t give local admin rights at all. If someone needs admin access, they can request it and explain why through a formal process. It keeps things more secure!
For management backing, check out the Australian Signals Directorate's "Essential Eight" model. One of the key points is to restrict administrative privileges, which could be useful when discussing this with your bosses.
We use a principle called Just-In-Time (JIT) access for developers who can make a case for needing it. But generally, it’s a hard no for most employees.
We don't give local admin rights except to certain IT personnel. Everyone else has to use a managed service like BeyondTrust to get elevated access when they need it. This way, we reduce risk significantly!
That makes sense! Being cautious with access really pays off in the long run.
In our office, local admin access is extremely limited. Only a few specific teams and IT support get it. For everyone else, we have strict policies in place that only allow temporary privilege escalation when it’s absolutely necessary.
I agree! It minimizes potential security issues while still allowing for some flexibility.
Right? It's all about making sure everyone works safely without compromising systems.