SUMMARY
To improve endpoint security, Administrative Rights on Laptops and Macs will be limited; requests will only be granted on the PCs and Apple Macs when there is a proven business need for privileged elevated access.
DETAILS
Requesting Elevated Administrative rights:
Users with a business need for Administrative Rights should complete the Administrative Rights Request Form.
The form must be completed in its entirety for each individual employee and associated Laptop or Mac.
Users who are granted Administrative Rights, must abide by the “Administrative Rights Access Policy.”
Approval Process:
- A user needs to complete the administrative rights request by submitting the Service Request (Refer to this document about how to fill out the request form).
- The respective approver will review the request and follow-up if any additional information is required.
- The designated approver will approve or deny the request based on the information provided and any communication with the user. If denied, the user will be notified by email.
- If approved, the Workspace and Collaboration (WCS) team will receive an email and provide the necessary access and software to grant Administrative Rights.
- The user will be informed that the request has been completed.
Note:
The activities performed while having Administrative Rights will be monitored.
Under no circumstances should a local “Administrator” user be created.
The misuse of administrative privileges is a key method used by attackers to gain unauthorised access to our networks.
Therefore, it is important that everyone is aware of the process that must be followed. Administrative Rights should not be provided to any one in any other manner unless given authorisation and approval.
Refer to the below videos on how to start using the tools for Administrative Rights.