When (and when not) to run as administrator

When (and when not) to run as administrator

Using an account with administrative privileges puts your computer at greater risk from malware, viruses and ransomware. Because of this, the Minimum Security Standards* that we are all expected to follow state:

A user's primary account should not have administrative privileges. Accounts with administrative privileges should not be used for non-administrative purposes.

COFA recognizes that on occasion there is a need for a faculty or staff member to use an administrator account for required tasks. For that purpose we can create a secondary account (usually named adminonly, or your EID suffixed with -admin) to be used only when needed.

In almost no case is it necessary or recommended that you log out of your standard account and log into your computer with the admin account. Instead, simply stay logged into your standard account and if you are doing something pre-approved that requires admin access you should receive a prompt like the following:

On macOS
On Windows

 

On macOS
On Windows

 

Examples of appropriate uses of an admin account:

  • Installing pre-approved software or drivers

  • Changing wi-fi settings

Things that should not be done with an admin account:

  • Adding additional accounts to your computer

  • Disabling firewalls or anti-virus software

For more information see How to Not Login as Administrator (and still get your job done)

*Minimum Security Standards for Systems