Forum Discussion
1492
May 07, 2021Moderator
In my org, to get local admin rights requires a written justification which must be approved by the requestor's supervisor, and by a unit CTO. The last being the most difficult hurdle.
We don't issue higher domain admin rights if the requestor does not already work in IT.
In any case, having local admin rights which allows installing software not on a staff service portal, requires completing minimum security training hours every year to keep elevated privileges. That does not mean one can install any software. It needs to be on an approved list, or an exception must be granted which requires security review.
Everyone in my org must complete a one-hour computer security course every year to maintain their staff account. Pretty much standard in most enterprise environments. I purposely waited until April 1 as I wanted my certificate to reflect that date. :W
The whole purpose is to protect the integrity of the enterprise network. We're also required to report any network security compromises to US-CERT.
We don't issue higher domain admin rights if the requestor does not already work in IT.
In any case, having local admin rights which allows installing software not on a staff service portal, requires completing minimum security training hours every year to keep elevated privileges. That does not mean one can install any software. It needs to be on an approved list, or an exception must be granted which requires security review.
Everyone in my org must complete a one-hour computer security course every year to maintain their staff account. Pretty much standard in most enterprise environments. I purposely waited until April 1 as I wanted my certificate to reflect that date. :W
The whole purpose is to protect the integrity of the enterprise network. We're also required to report any network security compromises to US-CERT.
About RV Must Haves
Have a product you cannot live without? Share it with the community!8,794 PostsLatest Activity: Mar 07, 2025