Poll: Do you allow staff to have Local Admin Privileges?

Be advised that this is a public poll: other users can see the choice(s) you selected.

+ Post New Thread
Page 3 of 3 FirstFirst 123
Results 31 to 40 of 40
How do you do....it? Thread, Do you allow staff to have Local Admin privileges? in Technical; Originally Posted by pinemarten Networkgeezer wrote: It would be like lending a master key to all the doors in the ...
  1. #31
    Irazmus's Avatar
    Join Date
    Feb 2006
    Location
    Suffolk
    Posts
    320
    Thank Post
    13
    Thanked 22 Times in 17 Posts
    Rep Power
    24

    Re: Do you allow staff to have Local Admin privileges?

    Quote Originally Posted by pinemarten
    Networkgeezer wrote:
    It would be like lending a master key to all the doors in the school to different people.
    our school went one better about 10 years ago - cut about 12 copies of the master room key , gave one to each of the cleaners....
    8O The only people here to have master keys are the caretakers, Head, Bursar and myself.

    We give LA rights to staff on their laptops so they can install hardware at home, but the system is so locked down that they can't do any harm.

    Only the Head of ICT and myself have LA rights anywhere else.

  2. #32

    Join Date
    Jul 2006
    Location
    London
    Posts
    2,963
    Thank Post
    160
    Thanked 153 Times in 117 Posts
    Rep Power
    50

    Re: Do you allow staff to have Local Admin privileges?

    All teachers and admin staff have local admin
    They cant install everything, as we are still frequently are asked to install software for them, but yes they can install most things

    It was a decision taken a long time ago and is going to be difficult to change. I might well try it in the summer. But I am worried about Sims upgrades etc - with over 100 teacher pc's, it would be catastrophic if they stopped working

    Only remember one instance of a teacher saving on the C drive, he lost his work when it failed and was informed it was his own fault. Everyone else seems to use their documents as they should

    Im not overly desperate to change their access because we have so few problems, but I realise its a security risk and I need to do it

    We're only just coming up to speed on security...up till last summer kids had local admin access ops:

  3. #33

    Join Date
    Mar 2007
    Location
    Coventry
    Posts
    4
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Do you allow staff to have Local Admin privileges?

    As with previous posts, on my sites the teachers own laptops have local power user access. Mainly due to home printers etc software installations that are required.
    On some sites I have set up syncronisation that will ensure all local documents are loaded to the server when connected to the network. Files that are stored anywhere else on the computer I am happy to 'clean' with the head teachers blessing.

    Keep the network locked down, if it comes to it you may need to develop a compromise policy with the members of staff that only give them particular access to particular areas. It may be that you need to allow access at a folder level within the computer. Takes a little time, but certainlty saves you time if it were all to go wrong.

    Nathan

  4. #34
    alonebfg's Avatar
    Join Date
    Aug 2006
    Location
    south west some of the time
    Posts
    834
    Thank Post
    12
    Thanked 34 Times in 21 Posts
    Blog Entries
    5
    Rep Power
    24

    Re: Do you allow staff to have Local Admin privileges?

    we do not allow local admin rights 1 so they cant install software on the local pc when i started had on pc with 6 ie toolbars and was dragging down the whole network and the second reason we had someone who had stored all there stuff on laptop and harddrive broke all work lost. That why they have roaming profiles on laptops also if you have roaming profile if network does go down they can still work and it will sinc when the netwok come back so that is not a arguement. one thing i have done for two members of staff is set there admin folder to sync so they if we do lose network they sill have access to this folder.

  5. #35
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 45 Times in 35 Posts
    Rep Power
    30

    Re: Do you allow staff to have Local Admin privileges?

    I dont allow LA rights to anyone....

    *decides to not go here as he hasn't enough time to rant on this one *

    Thankfully, no one has asked for them [that I can think of]. Only staff members that have asked get "DVD/CD" access [with a legitimate reason].

    While the current SMT will likely never draft a proper AUP for staff [or the kids - the kids do have to sign something, but its extremely old - and nothing to do with me. I did ask, but was looked at with a "why should you have anything to do with it?" kinda look, so there we go hehe], the county filters the internet and they technically come under the county employee status so if they misuse it, the county will know etc etc....

    *realises he did start the rant and promptly stops - time, printer toner out, etc etc*



    Nath

  6. #36
    Ravening_Wolf's Avatar
    Join Date
    Oct 2006
    Location
    Essex :(
    Posts
    290
    Thank Post
    1
    Thanked 3 Times in 3 Posts
    Rep Power
    18

    Re: Do you allow staff to have Local Admin privileges?

    So where has this "we say it and you do it" attitude come from then? When I took this job I naively assumed that the school wished to draw upon my 10 years+ experience and let me run the network to the best of my ability and leave me responsible for such matters. What an idiot eh?

  7. #37
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 45 Times in 35 Posts
    Rep Power
    30

    Re: Do you allow staff to have Local Admin privileges?

    lol You'd think that would be the way, and in some schools it is, but in some schools it isn't unfortunately.

    I just grin and bear it [as best as I can ]

    But where this discussion is going is best left to a different thread methinks

    Nath.

  8. #38
    Ravening_Wolf's Avatar
    Join Date
    Oct 2006
    Location
    Essex :(
    Posts
    290
    Thank Post
    1
    Thanked 3 Times in 3 Posts
    Rep Power
    18

    Re: Do you allow staff to have Local Admin privileges?

    Please feel free to add to the original topic though - the more evidence I can provide to my SMT of the stupidity of their idea, the better. Thanks everyone.

  9. #39

    Join Date
    Feb 2007
    Location
    Lincolnshire
    Posts
    120
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Do you allow staff to have Local Admin privileges?

    I have a solution you can put into words for them to understand why they shouldnt, but i feel it would be inappropriate to write, therefore i would just say no and tell them you dont know how to give local admin rights to staff, but you will "look into it"

  10. #40
    Friez's Avatar
    Join Date
    Dec 2006
    Posts
    839
    Thank Post
    22
    Thanked 22 Times in 21 Posts
    Rep Power
    24

    Re: Do you allow staff to have Local Admin privileges?

    I was reading on the daily wtf about a large company once that had ageing ICT servers. The CEO didn't want to pay for it to be upgraded, afterall it's worked so great for all these 20-30 years... fine.

    Then the AC decided to give in, and the ceiling decided to leak. The tech team obviously requested for fixes. CEO was more happy to pump the money (it was a serious server room) into a phat bonus for himself.

    So he instead said "JEEZ just move the servers into the corridor, no water there, am I the only person who can THINK in here?". Yes indeed. So servers got moved into corridor.

    Then they had an audit, they ended up forking out millions to get that new upgrade and server room going because the auditors made it quite apparent that putting peoples sensitive credit card/security/whatever data into a public corridor was not really legal.

    In short: If you have an SMT that don't care, they WILL care when their neck is on the line and its made blatently apparent with substantial fines and potential jail time.

    I know this story doesn't actually help you a lot, but I thought it was amusing and would cheer some of us up who are in that sorta situation :P



SHARE:
+ Post New Thread
Page 3 of 3 FirstFirst 123

Similar Threads

  1. Replies: 7
    Last Post: 26th February 2010, 11:00 AM
  2. Local admin password reset?
    By sidewinder in forum Windows
    Replies: 13
    Last Post: 15th October 2009, 08:26 PM
  3. Replies: 5
    Last Post: 7th February 2007, 12:28 PM
  4. Replies: 9
    Last Post: 14th December 2006, 09:07 AM
  5. Admin staff to 'admin' AD phonebook
    By ITWombat in forum MIS Systems
    Replies: 2
    Last Post: 31st May 2006, 11:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •