Most of you know what I mean. I'm referring to the local administrator or root account on a system. When a person has local admin, they can access any part of the system, change or disable settings (including deactivating anti-malware or other security software), and, perhaps most importantly, install and run any software. This last item is probably the primary reason people request this level of access.
We're talking about Minimum Necessary... the idea that everyone should have exactly the level of access needed to do their job, and no more. In most, if not all, organizations, far more people have local admin than really need it.
Security vendor Avecto recently released a new study showing that over 90% of the most serious vulnerabilities in Microsoft software products in 2013 could have been mitigated by simply removing administrator rights. Put another way, this means that only your systems administrators were vulnerable to all of the most critical Microsoft software vulnerabilities! And these are the people who have the most access on your systems! Here are a two good articles on the subject and here is a link to the full report.
Let's break this down...
