Geeks2U Promise
We guarantee you'll love our fast, friendly service - or we'll refund your money.  
133,572 Happy Customers & Counting
Need tech support?
1300 769 448
Extended hours, 7 days a week
Home  /  geekspeak  /  Administrator rights are jeopardising your IT security

Administrator rights are jeopardising your IT security

A wide range of security threats to your business could be thwarted by simply disabling administrator rights on staff computers.

If you’re a large organisation then you might be lucky enough to have dedicated IT people to set up new computers and kit out new staff members. If your business doesn’t have this kind of luxury then staff are perhaps handed a new PC and left to fend for themselves. If this sounds like you then you might be setting yourself up for disaster.

When most people set up a new computer, they usually stick with the default user account and then get on with their job. They’ll set a password and perhaps a cute user icon, maybe the kitten or that retro toy robot, but after this they’ll give no more thought to their account settings.

The problem with this is that the default Windows user account has administrator rights, letting you install software, change settings and run things in the background. This might make life easier when you’re setting up a new PC, but it also makes life much easier for malicious software trying to get a foothold on the computer.

Whatever your business does, the majority of your staff don’t need to run with administrator rights all the time. It’s an unnecessary risk, like giving every staff member a set of keys to every door in the building rather than just the areas they need to do their job. Administrator rights are like a full set of keys to a computer.

Instead it’s much safer to create a new user account on staff computers with standard user rights. They can use this account for day to day activities. Most staff probably don’t even need to know the administrator password for their computer, just like most don’t need the keys to the office safe.

This isn’t just unfounded paranoia. Disabling administrator rights would mitigate an amazing 97% of all reported critical security vulnerabilities, according to an analysis of Microsoft Patch Tuesday bulletins by UK-based security firm Avecto. You could argue that disabling administrator rights is just as important as installing antivirus, but it’s a simple step that many people overlook.

Running all your computers with full administrator rights is a major security risk which can easily be avoided. Taking those rights away from staff who don’t need them is a smart move which makes it harder for malicious software to get a foothold in your business.

Share

About Author

David Hancock

David Hancock is the founder and managing director of Geeks2U, a national on-site computer repair and support company.

Recent News

Generally speaking, when there’s an important update for your notebook, it’s a decent idea to install it. It may not be an update that makes an immediate obvious new feature available. Instead it may work behind the scenes to add layers of security, fix bugs or improve general performance. It’s why for the most part… More 

Samsung has long pitched its “Note” line of larger smartphones as being perfect for folks with a productivity focus for their smartphone work. A few years ago, it introduced a specific desktop dock for its Note and Galaxy S class phones, the DeX dock. Drop a qualifying Samsung phone into a DeX dock, and what… More 

For most of us, buying a new laptop is a matter of expediency, not outright tech desire. We’ll make do for as long as possible on an older system until it simply isn’t economical — or sometimes feasible — to continue working with it or repairing it. When that happens, market figures suggest that most… More 

Apple recently made some pretty large changes to its line of MacBook laptops. In recent years there’s been an array of choices, from the very small “MacBook” through the MacBook Air and MacBook Pro lines. Some of these had the newer butterfly keyboards and Apple’s own Touch Bar sensor, while others didn’t. If you didn’t… More