Why do we restrict access to admin accounts?
The purpose of a local administrator account is to allow users to maintain workflow continuity. This can include installation of software that complies with RESPEC’s Information Technology Security Policy, manufacturer-approved modifications to software applications, and installation of drivers for work-required hardware and devices. Local administrator accounts are not intended to install applications that do not further work activities.
The rules regarding local administrative rights help to create an understanding that this privilege increases organizational risks to security, data integrity, workstation stability, and software license compliance. It is assumed that people with local administrator rights are capable of doing a basic level of computer troubleshooting prior to contacting CITS for support, and accept the risk that workstations with instability issues are likely to be reformatted with a new version of Windows, which may incur data loss of locally stored files. Please review the Admin Rights Waiver for additional information.
How do you get admin access?
If you require Administrative Privileges to install software or perform Administrative functions on your system, You have two options for getting admin rights.
1) The IT Team can work with you on a time to perform the escalation. They will remote connect to your system and enter admin credentials to approve the action. You can initiate this by creating a support ticket.
2) You can utilize a program called Make Me Admin to escalate your account for a ten minute period to perform administrator actions.
To get permission to use the Make Me Admin application you will need to submit a request to the Helpdesk through the ticket portal.
IT will provide you with access to (MakeMeAdmin) through “Software Center” located on your Start menu and mark the incident as closed. You will need to remember to right click on the item(s) to install or perform admin action and select "Run as Administrator". Enter your regular username and password when prompted.
NOTE: The administrative rights provided by Make Me Admin will only work on your primary workstation and will not be available for installation on other computers.
To use the Make Me Admin software:
- Click on the Start button and click on the Make Me Admin application to open the software.
- Click on the button Grant Me Administrator Rights.
3. A Windows notification will pop up on your screen to confirm that you have been added to the local administrator’s group.
- If a User Account Control window appears enter your regular username and password. Example: Todd.Kenner with the same password used to log onto the computer.
Administrative rights will automatically be removed after 10 minutes.