Quantcast

Maximum PC

It is currently Fri Sep 19, 2014 11:57 am

All times are UTC - 8 hours




Post new topic Reply to topic  [ 11 posts ] 
Author Message
 Post subject: Developers should have admin access to their boxes, period.
PostPosted: Tue Oct 05, 2010 6:52 am 
SON OF A GUN
SON OF A GUN
User avatar

Joined: Mon Nov 01, 2004 5:41 am
Posts: 11605
/Agree?

>_<

They have gone all Hitler on the security policies here, and have decided all of IT should lose local admin access. I can understand some support roles, BAs, Project managers, etc... but full time developers?


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Tue Oct 05, 2010 8:21 am 
Java Junkie
Java Junkie
User avatar

Joined: Mon Jun 14, 2004 10:23 am
Posts: 24224
Location: Granite Heaven
Agree .. but they should also fix their own shit if it breaks.

Do you need admin on Windows boxes to run VMs?


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Tue Oct 05, 2010 8:52 am 
SON OF A GUN
SON OF A GUN
User avatar

Joined: Mon Nov 01, 2004 5:41 am
Posts: 11605
Right, and we usually have to fix it ourselves anyway. Because our service desk will say "You are unmanaged, so first we have to make you managed. We need to re-image your machine".

I don't think we need it to run them, but anything with web development and IIS you do. The biggest issue is they don't want full time admin access (fine) so we have to use a different user account... which just adds "-extra" to the user name. Problem is a lot of what we work with doesn't like the hyphen in the name.

>_<


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Tue Oct 05, 2010 8:55 am 
Java Junkie
Java Junkie
User avatar

Joined: Mon Jun 14, 2004 10:23 am
Posts: 24224
Location: Granite Heaven
*facepalm*

Sounds like a load of utterfail to me.

Let me guess, you have more middle-management types than any other employee?


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Tue Oct 05, 2010 11:17 am 
SON OF A GUN
SON OF A GUN
User avatar

Joined: Mon Nov 01, 2004 5:41 am
Posts: 11605
Honestly, I am not sure that is accurate. We are definitely peons though.

The CIO has this security bug... a year or so ago we create a new security oriented group... and they decided that having "unmanaged" machines, or machines where users are admins was a no-no. They also declared that Chrome and FF were less secure than IE because there was no official patch schedule / patch plan.

Corporate IT fwiw.


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Tue Oct 05, 2010 12:13 pm 
Java Junkie
Java Junkie
User avatar

Joined: Mon Jun 14, 2004 10:23 am
Posts: 24224
Location: Granite Heaven
:lol:

Working at AOL was like that, hence my question about middle management. MM bloat will sink the most profitable ship.

BTW: I love the way you ran over Godwin in your first post. Might as well get that shit over with right away, eh? :D


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Wed Oct 06, 2010 6:52 am 
SON OF A GUN
SON OF A GUN
User avatar

Joined: Mon Nov 01, 2004 5:41 am
Posts: 11605
Yup. I try to be efficient where possible.

It sounds like they are eventually going to set up a separate domain for IT / Developers. Too bad they wanted a solution "yesterday".

The main thing they want is that the internet and email is not accessed with an account that has admin access (makes sense).


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Wed Oct 06, 2010 1:35 pm 
Million Club - 5 Plus*
Million Club - 5 Plus*
User avatar

Joined: Sun Sep 12, 2004 6:37 pm
Posts: 4745
Location: In the monkey's litterbox
Now just try developing a Windows service when you don't have admin or install rights. I eventually got install rights, but that even took a massive amount of time to approve.


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Wed Oct 06, 2010 1:57 pm 
Bitchin' Fast 3D Z8000*
Bitchin' Fast 3D Z8000*
User avatar

Joined: Tue Jun 29, 2004 11:32 pm
Posts: 2555
Location: Somewhere between compilation and linking
You guys better chill... someone might confuse you for a bunch of academics bitching about corporations! =)

XKCD - Academia vs Business


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Fri Oct 15, 2010 7:58 am 
SON OF A GUN
SON OF A GUN
User avatar

Joined: Mon Nov 01, 2004 5:41 am
Posts: 11605
So far it hasn't been SUPER painful... but I am "cheating" a little.

A while back I wrote an app that reads two directories for me. One is shortcuts and cmd files. Another is powershell scripts. I then wrote another app that I start the first one with, however it launches it with my admin account using my saved (and encrypted!) password.

Programmers = lazy. I made my job easier (read: it lets me be lazy).


Top
  Profile  
 
 Post subject: Re: Developers should have admin access to their boxes, peri
PostPosted: Thu Oct 21, 2010 12:01 pm 
Bitchin' Fast 3D Z8000
Bitchin' Fast 3D Z8000
User avatar

Joined: Mon Jun 14, 2004 4:04 pm
Posts: 985
Location: Earth
CrashTECH wrote:
/Agree?

>_<

They have gone all Hitler on the security policies here, and have decided all of IT should lose local admin access. I can understand some support roles, BAs, Project managers, etc... but full time developers?


When I first started at my present job, the IT Manager thought it was befitting that I have no local admin access. Trying to install ANYTHING would have involved calling the help desk, requesting a software install and then waiting for the nincompoops to come and install the software.

My manager got around to hawking over the network people and I got the access I need. So in short, yes, I agree.


Top
  Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 11 posts ] 

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group