4 ms·
My work makes us Delinea (Thycotic) PAM which is single process and blocks all OS calls to check if you have privilege to run/execute a command. Additionally, w
by cebert 3y ago
My work makes us Delinea (Thycotic) PAM which is single process and blocks all OS calls to check if you have privilege to run/execute a command. Additionally, we have to run CrowdStirke, Netspoke, Windows Defender, and some type of “inventory scanner” app. My work laptop is much more powerful than any of my personal personal computers on paper, but the nannyware slows everything to a halt (64 GB RAM, 12 cores).
It’s very painful to not have local admin rights on a Windows machine if you’re a developer. We can’t even install Docker or make changes to it without “help” from our non-developer IT staff.
- phatskat 3y agoOur dev machines (mostly Mac) are also locked down, thankfully we have “Admin By Request” which works better than calling in IT at least. Fire up an ABR session, do your admin stuff, close the session. A minor hassle and it gives IT a paper trail for later (and probably pings someone if certain software names come up during a session).