Re: Desktop Administrator Question

[Steven Alexander <alexander.s () MCCD EDU>]

We are currently moving away from giving local admin rights to all users.  Everyone, including  system/network 
administrators should be operating with basic user privileges most of the time.  Client-side exploits are a major 
attack vector and many or most of them depend on users having admin privileges.

Regards,

Steven Alexander Jr.
Online Education Systems Manager
Merced College
3600 M Street
Merced, CA 95348-2898
(209) 384-6191
alexander.s () mccd edu

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Johnson, 
Jeff
Sent: Tuesday, January 31, 2012 3:13 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Desktop Administrator Question

Hello Everyone,

DePaul is currently evaluating how we have access rights and roles setup on desktop/laptop computers at the 
institution.  We currently give all employees administrator rights to their desktop computer.  Our understanding is 
that most institutes of higher education are offering employees of the institution administrator rights on their 
desktops, but we would like to validate this to satisfy some questions from some others (particularly internal audit 
folks).  As such, we were interested in gathering some more concrete data on this and have created a very short and 
simple (4 question) survey to capture this information.    We would very much appreciate your participation if you are 
able, and we will share the results for everyone via email (cleansing any personal information you choose to enter 
prior to doing so of course).  If you would rather pass this on to colleagues involved in desktop administration and 
support, that would also be most appreciated.

Here is a link to the survey:  http://depaul.qualtrics.com/SE/?SID=SV_6lNkqctZNQ5BZaI

Thank you so much for your help!

Regards,


Jeff Johnson
Infrastructure Support Manager,
Information Systems,
DePaul University


This email has been scanned by a Spam/Virus Firewall. If your email has been classified as Spam please contact the 
HelpDesk at (209) 384-6180.