3 ms·
I don’t get the point of not allowing administrator to the local machine to employees. The local machine is practically a throwaway in my opinion. Why should we
by mcny 5y ago
I don’t get the point of not allowing administrator to the local machine to employees. The local machine is practically a throwaway in my opinion. Why should we care about it? The shared folder is much more vital to the business.
- ryanmcbride 5y agoYeah anytime a job locks admin access to a local machine I assume their network security is full of holes, and I'm usually right about that assumption.
- curryst 5y agoIt makes some attacks a lot easier. You usually need admin access to install a rootkit so your virus can re-install itself. You also get full control over the network stack, which makes it trivial to MitM traffic. Admin access will let you disable whatever security monitoring tools are installed so you can stay undetected for longer. Locking down admin access is less about protecting the local machine and more about preventing the laptop from becoming a jumping off point into more important pieces of infrastructure. It's by no means fool proof, but it adds another security feature that has to be countered. I don't know whether it's worth the trouble it creates, but I don't think it's totally without justification.