Technology

Administrative Accounts

Note: This policy is provided for your reference only.

Modern operating systems have levels of permissions which (among other things) separate accounts for system management (including installation of software) from accounts for everyday use. We call such privileges "administrative access."

Anyone using administrative access may unintentionally cause problems on the computer itself, on the file server, or on the Simmons network. Before being granted administrative access, you must read and understand this document.

Risks associated with using an administrative account:

  • installing software that, while harmless itself, interferes or is incompatible with other software loaded on the system causing one application or another to fail
  • running software, including installation scripts, which interferes with or corrupts the operating system
  • changing system preferences, causing the operating system or other applications to fail
  • inadvertently contracting a virus or engaging other malicious software

Guidelines to follow:

  • Always use an account with fewer privileges when it is sufficient to do so: continue to use your regular account in the normal course of work. Because of the dangers of malicious software often transmitted through email and web site popup windows, while logged in as an administrator specifically avoid using email and other messaging tools, and browsing web sites.
  • Administrative passwords must be different from all other passwords, and must not be shared, written down, or typed. Never transmit any password through email. Technology will never ask you for your password.
  • Do not use the "Users and Groups" control panel or change the account or user templates configurations. In particular leave the Help Desk's administrative account(s) and configurations as the Help Desk has configured them.
  • As with every Simmons-owned computer, antivirus software configured for automatic updates and regular Windows updates are required.
  • Prepare for the possibility the computer may have to be re-imaged by: storing data files on the file server; and routinely backing up bookmarks/favorites, address books, and email data to the server.

Support for computers with administrative accounts enabled:

  • By taking on administrative rights to Simmons-owned computers, faculty and staff share some of the responsibility for support of the system. Technology staff responsible for the systems will make an effort to troubleshoot problems arising after installing or configuring software, and any administrative users will do what they can to assist the staff in this effort.
  • If the operating system or basic functionality of a system appears to be compromised by a software installation or other exercise of administrative rights, Technology's policy is to reinstall the basic system image for the computer. The Help Desk will not schedule re-imaging until the faculty or staff member has given her/his consent. Faculty and staff may choose to discuss the re-imaging decision with the Help Desk Manager.

policy enacted: 6/22/04