Icangoogle Posted June 24, 2015 Posted June 24, 2015 Have you giving staff local admin rights If so how are you protecting your network
Arthur Posted June 24, 2015 Posted June 24, 2015 Have you given staff local admin rights No. Far too risky!
witch Posted June 24, 2015 Posted June 24, 2015 Arrgghhhhhhh That way, madness lies We're all Doomed, Doomed 1
FN-GM Posted June 24, 2015 Posted June 24, 2015 I can't see any reason why they should have it if they don't to school desktops.
clockend25 Posted June 24, 2015 Posted June 24, 2015 We have for 2-3 years, however have decided to stop doing so as part of some improvements to security across the board.
BKGarry Posted June 24, 2015 Posted June 24, 2015 errrrrr, Hands up time......... Our do, and have done the 8 years I have been here, never really caused us any issues. The most you get is some malware on the laptop now and again but that has reduced dramatically since I installed McAfee Site Advisor Enterprise onto the staff laptops. You do end up with some strange bits of software but all staff know if there is an issue and we have to "reimage" their laptop they will lose that sf have to reinstall it themselves.
pcstru Posted June 24, 2015 Posted June 24, 2015 We will give local admin rights on request for short duration to allow people to install stuff, generally printer support software for their home printers. We do a quick sanity check for nasties when we remove the rights.
tmcd35 Posted June 24, 2015 Posted June 24, 2015 Yep, no problem. in fact solves some issues. They take their laptops home can install their own drivers and software. It's a tool for them to use in lesson planning. They are all kept up to date with the latest AV definitions and everyone knows that if we find stuff we don't like on the laptop when we service it then it will be wiped clean and whatever is on there will be lost forever. They're adults, it's generally best to treat them that way - until they give you reason otherwise.
Simcfc73 Posted June 24, 2015 Posted June 24, 2015 I do on laptops they take home, wouldn't dream of doing it on a domain attached one. If they mess it up then tough, it gets wiped.
3s-gtech Posted June 24, 2015 Posted June 24, 2015 We don't give anyone but SLT laptops. Even they don't get local admin - Power User rights give them the ability to add printer drivers, but they can't install software and the system is a bit more resilient as a result.
Techie2000 Posted June 24, 2015 Posted June 24, 2015 Only to Staff laptops - but they have the latest AV definitions installed. There is always the one or two teachers who end up with a bit of malware but other than that we don't have an issue - a quick reimage once a term and problem solved (and usually SCCM's Endpoint reporting will let me know). Ultimately it goes down to the AUP and the staff device policies that will help protect as well as software/ hardware protection in place. Our staff know they will lose many rights if they abuse the laptop - hardware and software wise.
thebatman Posted June 24, 2015 Posted June 24, 2015 We give local users Power User rights to allow them to install Drivers but that is all. Many moons ago we allowed them Admin rights and it was the biggest mistake we had ever done. Software/Games installed, Torrent Apps, you name it it was on them.
GRitchie Posted June 24, 2015 Posted June 24, 2015 There are a couple in our network that do, but we tend to avoid doing it now. Not even for more senior members of staff. Incidents where software has been installed in the past without the correct licenses has caused all sorts of problems. Not to mention seeing 'uTorrent' on the desktop... I'd stay well clear of it and make sure everything goes through you. At least that way, you can't be held responsible for something like that happening.
halbaradkenafin Posted June 24, 2015 Posted June 24, 2015 Only on laptops that go home and stay there. They undoubtedly have various software and drivers to install so they'll need admin rights for that. The laptops they take home aren't domain joined and although they have an AD account (another level of recording who has what) it's disabled as soon as they are finished building and updating from SCCM.
Sheridan Posted June 24, 2015 Posted June 24, 2015 Not here, and it seems to cause no issues. In fact, in comparison with the primaries we visit (where the staff have admin rights) our laptops are running much better at 5 years old than their 1 year old laptops! Could it be due to all the rubbish installed?
Joanne Posted June 24, 2015 Posted June 24, 2015 I allow local admin rights. I don't have time to be updating flash and java every 2 minutes!! A few issues, but nothing a re-image won't resolve!
plexer Posted June 24, 2015 Posted June 24, 2015 I don't run as local admin on my home laptop use UAC when needed to install something simples. Ben
Little-Miss Posted June 24, 2015 Posted June 24, 2015 (edited) I did at my old place. They weren't on the domain and i hardly saw the bloomin things. They usually used them at home for lesson planning and Target Tracker which was cloud based. Probably not the best thing but never caused me any issues. Lots of pointing to the AUP, hammering home that it doesn't belong to them and then a bit of "well if you mess it up, i'll have to wipe it and you'll lose everything". Edited June 24, 2015 by Little-Miss
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now