If your devs are working with higher level platforms like Java/Python/etc. Discussion and establishing mutual understanding is key here IMO.

For the devs this is their work environment as well.

I've got a select set of users (developer types mostly) who feel they need to have local admin rights to their computers.įirst action is to figure out if this is just a feeling or an actual need for their day to day tasks.Īm I being overprotective of my environment? You're on the same side right? Trying to make the company successful. I'm trying to decide if I want to fight this battle The key thing is we worked together, there wasn't any kind of friction, and he didn't try and ram it through without consulting with us first which would have set us up for a 'battle'.

Unfortunately, as I said we hit a brick wall and weren't able to roll it out. As a result we worked with him to try this and out and try and make it work. The Sysadmin who worked with my team on this positioned it as a collaborative experiment, he didn't come in heavy handed and try and force it on the team. Tell them that you really want to work towards a more secure posture and ask if they can work with you to figure out how you can do that. I would recommend working with the developers and setting this up as an experiment. Debugging can be a core task for a developer so making it impossible or onerous to do is really self defeating and setting you up for conflict. While most of the work I was doing could be done without admin access, when performing debugging* we hit a brick wall without admin rights. We went through an evaluation process with the Sysadmins at my former company to determine if we could lock it down. Yes, as a former developer I absolutely needed it for certain tasks.

Devolution rdp