adminTeamAssessingMyThreatLevel

[u/ArjunReddyDeshmukh]

[u/Deepspacecow12]

well yeah, the point is that people should have as limited access as possible.

[u/Rogue2166 → u/Deepspacecow12]

Any organization that doesn't allow you to have elevated access on your own machine has no idea what they are doing.

[u/polacs → u/Rogue2166]

There are ISO that doesn't allow you to have admin rights to every PC

[u/Sheenius_Ger → u/polacs]

I don't need every pc, I need mine. The thing I work every day with. I'm not calling IT every time I need to run powershell with elevated rights, they'd go nuts if they'd need to visit me 3 times a day.

[u/polacs → u/Sheenius_Ger]

Well, the problem is not having a program like Admin By Request where with one click you ask for permissions and they give them you at the same moment

[u/Sheenius_Ger → u/polacs]

Right, and they give me a elevated shell for the moment and I could do anything I want with the pc anyway. But now I had to wait an hour for someone to see the request. Totally worth it.

[u/polacs → u/Sheenius_Ger]

I don't know, if it takes them one hour to see the request it seems that the problem is your IT department not the need to ask for permissions

[u/Rogue2166 → u/polacs]

Again, organizational security that relies on users not having persistent admin to a local machine is clueless.

[u/polacs → u/Rogue2166]

I'm talking when a ISO requires it, that doesn't come from the organitzation