Hi all, what do you guys do for developers who insist on having local admin rights with their main account? Currently they have regular user accounts with no local admin privileges, but we also give them a local admin account to install apps. They(including Director of development) are now complaining that they are having issues because installing certain apps with the local admin account has issues since they are logged in as the regular user account. Even some 3rd party apps won't work because of this. I've researched and read online and without giving them local admin accounts with their main account, I came up with 3 options.
- Developer only have user access and have IT somehow push requested apps, or they just can't use those 3rd party apps they need.
- Give them a secondary local admin access to install apps.
- Have them use a 2nd machine (can be VM), one for their regular user account to check email, Internet, etc. and the 2nd one for just a coding machine with no access to corp network. (this might also be a problem because their coding machine will need corp server services, like code check in, ticketing system, etc.)
First, I need to "convince" our developers why they shouldn't have local admin accounts with their main user account. Do you have an websites/blogs I can reference easily? I've searched a lot online and there is good info here and there, including anything that's breach related but looking for any good comparison site.
Secondly, what do you recommend or have put in place that works with your developers? I think giving them a 2ndry local admin account was a good middle ground but I guess not anymore?
SOCIAL SHARE CARD GENERATOR