RES: Rights

["Ricardo Perin" <ricardop () locaralpha com br>]

At my company, all user are restricted, and can´t do things as to install
programs or change some windows configuration. I think that this is the
better way to employ security to our network. 

We already suffer with spam and virus as a lot. 

Our users are very, very limited (in a intellectual way), and if we let they
do what they want to do certainly my company will falls down.

If there is a formula to do this I would say that is: give to your users
only what they need to work and nothing more.

Regards

Ricardo Perin
 
> -----Mensagem original-----
> De: I Freecycle [mailto:i.freecycle.too () gmail com]
> Enviada em: quarta-feira, 28 de junho de 2006 14:02
> Para: security-basics () securityfocus com
> Assunto: Rights
>
> Hello,
>
> I'm wondering how others deal with allowing users rights on work
> computers.
>
> At our school, users aren't normally given Administrator or Power User
> rights unless it's absolutely necessary.  Occasionally we
> encounter employees and students that don't understand how easily a
> system can be messed up and the security issues involved nor why we
> feel it's necessary to operate like this.
>
>
> I would like to know what others do, and what policies they have in
> place to address these issues.
>
> Thanks,
>
> --------------------------------------------------------------------------
> -
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic Excellence
> in Information Security. Our program offers unparalleled Infosec
> management
> education and the case study affords you unmatched consulting experience.
> Using interactive e-Learning technology, you can earn this esteemed
> degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
> --------------------------------------------------------------------------
> -


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------