General discussion

Locked

Access to admin rights

By MOGIJ ·
Hi! We have a Co policy that only IT staff have access to the Administrator password per pc. Recently, a line manager requested this access. I quoted co policy and told him that there was no way he could get this.
He went to the Financial Manager whom I report to and because they are personal friends, the Financial Manager has approved this. I am now forced to give in to this. Because we are a semi-Govt organisation, he will probably get away with this breach of Co policy.
We often have this - where managers who are personal friends with each other, get away with this kind of thing. It is becoming so that it is best to look the other way than have 5/6 managers against you! Any advice.
Disgruntled!
IT Manager

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Seperation of church and state

by LordInfidel In reply to Access to admin rights

Although you report to the financial manager (god only knows why) He is not he IT Manager and should not be making those decisions.

I personally would stand my ground and tell him no. (I have done this many times before to our executive staff when they asked for admin rights to their local machine)

In short there is absolutely NO reason why an unpriviliged user needs superuser capabilites on the local machine.

What I would do is grant that user, power user rights on that machine. Inform your boss that if that user breaks anything on the machine due to his new priviliges, that it will be taken away.

Collapse -

I side stepped it.

by admin In reply to Access to admin rights

I made a group called poweradmin and gave them a little more access to bells and whistles on the workstations and let them run a-muck knowing that I can re-image the workstation in a few minutes and that anything of importance or that gets saved resides on the servers anyway.

The regular admin account is renamed both places anyway, so it's not like they even know what it is in the drop down menus.

When I get more time I'm going to track what features they are really using and set the policy accordingly :)

They have been happy for a long time now, and I didn't waste much time at all in a power struggle.

~/-\~

Collapse -

I side stepped it.

by admin In reply to Access to admin rights

I made a group called poweradmin and gave them a little more access to bells and whistles on the workstations and let them run a-muck knowing that I can re-image the workstation in a few minutes and that anything of importance or that gets saved resides on the servers anyway.

The regular admin account is renamed both places anyway, so it's not like they even know what it is in the drop down menus.

When I get more time I'm going to track what features they are really using and set the policy accordingly :)

They have been happy for a long time now, and I didn't waste much time at all in a power struggle.

~/-\~

Back to IT Employment Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums