FAQ - Local Admin Rights Policy

Owned by Former user (Deleted)
Last updated: Aug 11, 2022 by Joshua StoneVersion comment
4 min read

Full text of the policy is available here: Limited Local Administrator Rights - PC

 

Question:
If I need new software, who does the installation?

Answer:
If you’ve requested the software through IT, then IT staff can handle installation for you. All software requests should be placed through IT in order to ensure compatibility, reduce the risks of unintended malware, and manage licensing.

Additionally, those with local admin accounts have elevated privileges, which means they can approve software installations. 

Many apps don’t require administrator-level access in order to be installed on your computer.

All software installed on a University-owned computer should be for work-related purposes. Avoid installing personal software, as it may unintentionally result in conflicts or malware.


Question:
What if my software needs to be updated?

Answer:
Most software updates should not require administrator-level privileges. If you receive a prompt to login as an administrator, contact the person in your department with local admin rights, or place a request with IT.


Question:
How do I get my local admin credentials?

Answer:
Our system security administrators, Matt Hernes or Jacob Williams, will send you an email with your credentials. The text of the email includes your username and password, as well as instructions on how to login and set a new, permanent password.


Question:
Will my password expire?

Answer:
No! These passwords are set to not expire. This is to help protect the security of the account by making it easier for you to remember your password.


Question:
I forgot the password for my administrator account. How can I get it reset?

Answer:
Submit an ITicket through the Help Desk like you would for other login issues. The request will be routed to the appropriate staff who can reset the password for you. We plan to eventually include these accounts in the Account Management System so you can manage all of your Valpo passwords in one place.


Question:
Will this remove any software already installed on my computer?

Answer:
No; software already installed on your computer won't be removed or impacted by this change in local administrator rights.


Question:
What about media content I need for my classes, such as songs, videos, etc?

Answer:
If you already have to software installed that you use when utilizing media content, then you shouldn't see any impact. Media content purchases aren't impacted by this change.

If you need software that isn't already installed, such as iTunes or something else, place a request with the Help Desk to have it installed. Make sure to note the classroom(s) where you need it installed as well as any office computer(s) where you need it. Give us as much lead time as possible before the class when you'll be utilizing it.

The media files you access via a shared network drive (such as S:) or a flash drive shouldn't be affected at all.


Question:
Do I have to wait for IT to visit my office to take care of installations/updates?

Answer:
It's best if you ask one of the people in your own department with local admin rights to assist you.  If you do need IT's assistance, however - we're working to establish remote access capabilities so we can install software remotely without having to visit their office. This will enable us to fulfill requests more quickly. Users will need to grant permission for us to access your computer. IT staff will not be accessing computers without your permission.


Question:
I have a Mac, will that be affected as well?

Answer:
No, right now this process is only affecting Windows-based computers.  At some point in the future, we will undertake a similar process for Mac computers, but not until all the Windows machines have been taken care of.


Question:
Does this affect any of my network storage, such as H: or S: drives, Google Drive, etc?

Answer:
No, this only affects the ability to install software or certain software updates on your University-provided computer to reduce the risk of conflicts or malware infection.


Question:
Can IT track which admin credentials were used to approve a software change?

Answer:
At this time, given our current technical tools and the way our network and computers are configured, the best we can do it determine who is logged into a computer at a given time. We're not able to verify which administrator credentials were used to approve software changes. This may change in the future.


Question:
Why is IT making this change?

Answer:
For multiple reasons.

  1. We need to reduce the risk of a campus-wide catastrophe happening as the result of someone unintentionally installing malicious software (such as ransomware) that spreads throughout campus.
  2. We're also laying groundwork to ensure that we're in compliance with various federal laws that protect the security and privacy of University data, such as the Gramm-Leach-Bliley Act.
  3. The President's Office has mandated that we do everything we can to reduce these risks to campus.


Question:
What's the difference between a decision maker and a local admin?

Answer:
A decision maker is someone authorized to approve decisions relating to technology, such as equipment purchases, access requests, permissions changes, and so forth. These folks generally have budgetary access or authority (though not always).
A local admin is someone who will keep track of the necessary credentials (username and password) to enter on a computer when prompted, such as during software installations or updates. These folks need to be comfortable with using computers and specialized software used in their area.


Still need help?

For additional assistance, contact the IT Help Desk.