I’ve been asked to take management of a network on which users have to have admin rights to their computers.
It’s a mixed Windows and OS X client environment with Linux server (users are not given admin rights to the server).
Due to a nature of their business, users need to have local admin rights to install and test software (this may happen dozens times a day, apparently).
I’m managing the network remotely.
As the users will have local admin rights I need to have strong IT policies, where I’ll specify DON’Ts for the users.
So far I see:
1. no OS updates (inc. patches)
2. no changes to network configuration
3. no password changes on admin account
4. no removal or modifications to the remote access software
5. no installations of firewall or antivirus software
6. no changes to the current configuration of firewall or antivirus software
7. no installation of software downloaded from torrents
I’d like to hear from someone who is managing or have managed network with simillar requirements and could give some points what to look at to get it done.
Of course, any other comments are most welcomed as well.
Thanks
Pawel
