But Microsoft has a more pragmatic approach to this problem these days. Nevertheless, there are certainly barriers that make this a difficult path in some cases. (Although, I usually find they are bluffing, and when pressed can often explain the folder permissions and/or registry changes that would be required to run without local admin). Some Line of Business apps also will claim not to support removal of local admin. Some orgs do need to maintain a bit more flexibility, with users able to install new app packages as required. But that still isn’t very easy to do for many organizations. Yes: from a security perspective it would be ideal if we could take away local admin privileges on every corporate owned Windows 10 workstation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |