Re: Peeling off desktop Administrator Rights

["Plesco, Todd" <tplesco () CHAPMAN EDU>]

Great question.  To my knowledge, our desktop users have less than a day turnaround thanks to remote capability by the 
support staff.  "administrator" privilege provides "covert" installs and file directory traversal which are of greater 
concern than business application installs (which are detected through LANDesk.  

Todd A. Plesco  CISM, CBCP
Chapman University, Director of Information Security
One University Drive, Orange, CA 92866
Phone: (714) 744-7979/Fax: (714) 744-7041


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of randy 
marchany
Sent: Monday, December 07, 2009 8:44 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Peeling off desktop Administrator Rights

I presume the primary reason for preventing local users from having
admin rights on their desktops is to keep them from installing "evil"
software.

If this is so, then my question to the group is "how long does it take
a desktop user to get a "legitimate" piece of software installed on
their desktop? ....