Educause Security Discussion mailing list archives

Re: [External] [SECURITY] Local Admin Access


From: Andy Leffler <aleffler () LIPSCOMB EDU>
Date: Wed, 7 Apr 2021 13:27:21 -0500

I like it Chris Gregg. This is the way.

On Wed, Apr 7, 2021 at 1:24 PM Gregg, Christopher S. <csgregg () stthomas edu>
wrote:

We default to not providing admin access.  Where possible we use LAPS for
short, one off needs.  If a user makes a business case for long term admin
access, we grant the access through a second account so the user is not
logged in with an account with admin privileges while doing routine work.



Thanks,



Chris





*Chris Gregg*
Associate Vice President of Information Security & Risk Management, CISO
Innovation & Technology Services (ITS)
csgregg () stthomas edu
p 1 (651) 962-6265
*University of St. Thomas* | stthomas.edu <https://www.stthomas.edu/>











*From:* The EDUCAUSE Security Community Group Listserv <
SECURITY () LISTSERV EDUCAUSE EDU> *On Behalf Of *Emilie Kunze
*Sent:* Wednesday, April 7, 2021 12:08 PM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* [External] [SECURITY] Local Admin Access



We are curious how other institutions handle local admin access for
faculty/staff?



Thank you,

Emilie




<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Faustincc.edu%2F&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C77e5c284b44c42185ce308d8f9e728de%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C1%7C637534118517765413%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=LFWoVX6L%2FCIR%2BwY4GMB391RxrhHY5zPhvsy%2F7Hkpkaw%3D&reserved=0>

*Emilie Kunze*

IT Security Analyst Sr.

Acting Information Security Officer

Office of Information Technology

ekunze () austincc edu  | o 512-223-1157

ACC Information Security
<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fit.austincc.edu%2Fdepartments%2Finformation-security%2F&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C77e5c284b44c42185ce308d8f9e728de%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C1%7C637534118517765413%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=acakzvp9YNQc6XS9iQ%2BWTK9O5GtcE1HieRq%2FuM4OltE%3D&reserved=0>


<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Faccinfosec%2F&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C77e5c284b44c42185ce308d8f9e728de%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C1%7C637534118517775406%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=3LhJAYrG3U3ppgvkb7rovP%2Fl1C6WCHij7EmCOp4BWwQ%3D&reserved=0>

<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FACCInfoSec&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C77e5c284b44c42185ce308d8f9e728de%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C1%7C637534118517775406%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=0FPUiaYn57OnMRK3gUGHpveklQa2f19Y3BcvdrZsW%2B8%3D&reserved=0>






*                                                  CONFIDENTIAL NOTICE
                                            *
This communication, including any attachments, may contain confidential
information and is intended only for the individual or entity to which it
is addressed. Any review, dissemination, or copying of this communication
by anyone other than the intended recipient is strictly prohibited. If you
are not the intended recipient, please contact the sender by reply e-mail,
delete and destroy all copies of the original message.



**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community
<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Ccsgregg%40STTHOMAS.EDU%7C77e5c284b44c42185ce308d8f9e728de%7Ca081ff79318c45ec95f338ebc2801472%7C1%7C1%7C637534118517785395%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=jJJzokQ2avv0MClxxZaY%2BZqFYdVBJsyj4%2FjQ8G2%2BCjI%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community



-- 
——————————————————————————————
Andy Leffler
p  615.966.5641 <+16159665641> | e aleffler () lipscomb edu

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: