Re: Privileged Users

[Kevin Ledbetter <kevin.ledbetter () VALPO EDU>]

We create special username.admin accounts with local admin rights that
apply only to their department's computers.  These accounts do not have
rights to network shares, which discourages people from using them for
everyday use. The .admin accounts are provided ONLY to provide admin
credentials when needed. We also have GPOs that remove any local admin
rights granted to their regular AD account thay they may set using the
.admin account.
Kevin Ledbetter

On Fri, Jun 18, 2021 at 8:06 AM Dr. Christopher Davis <CDavis () franciscan edu>
wrote:

> Does anyone have a system in place (possibly a form with a policy backing
> it up) that you use to identify and approve “privileged users” who are
> allowed to have local admin access to their assigned campus machines?  We
> are looking to make some changes to our policies and procedures and are
> wondering what others are doing?  Thanks!
>
> Pax Christi,
>
> *Dr. Chris Davis*
> Director of Information Technology Services
>
>
> Franciscan University of Steubenville
> 1235 University Blvd.
> Steubenville, OH 43952
> 740-284-5192
> cdavis () franciscan edu
>
> “The body was made for the sake of the soul, and this world for the sake
> of the other world.”
> St. Giles
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community


-- 
*Kevin Ledbetter*
Systems Security Administrator
Office of Information Technology

1700 Chapel Drive
Valparaiso, IN 46383
219.464.6191
Staff Employee Advocacy Council
Kevin.Ledbetter () valpo edu

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community