Why should my company not give out local admin rights to whoever asks for them?

Question

I'm looking for some specific risks associated with passing out local admin rights to users at my company. I understand it is a security risk, but why is it a security risk?

Answer 1

because they can make unauthorized changes to the system and you don't want that happening...they can install all kinds of stuff even spyware....so don't do it

Answer 2

Because if one of them gets fired or leaves to another company.He/she could snoop on the competition.Also they could make life rough for you If they wanted to.

Answer 3

You should not need to explain to them, they don't have the training you have and are not qualified to make that call. The root reason is plain and simple, people are stupid, they are hackable where machines are not, they will download c**p, maybe some uneducated, but well intentioned employee will download an "anti-virus" which turns out to be rogue, the less power someone has the less damage they can do. As for they want them, too bad, I WANT a million dollars, life isn't fair, and they need to learn to deal with it. What exactly do they want to do, if it is downloading, they don't need to do that, if they need something they can ask you and you will override. Most companies do this.

Here is an example: at a company I used to work at there was an email going around with a virus, so we told all the employees the name of the email and not to open it, well some complete idiot decided he wanted to know what would happen if he opened it, our whole network went down for three hours and he caused me a lot of hardship, not only was management pissed at him they were angry at me, do yourself a favor and deny them the power to cause you suffering.

If you have a company email tell them to send emails with attachments there so they can be scanned first. And as for changing properties on local computers, don't touch, you would be amazed at the things that can become problems.

If you still need examples, then let them have it and compile nice reports and logs to present to management about it and why it should not be allowed, guarantee that someone will do something.  

Answer 4

well coz then one would b able to view the other's personal stuff like emails n stuff n so there can only b one admin which everyone has to trust n rely on like u know the boss (they can view there emails n stuff by puttin in spywares n stuff) its just they can do whatever they want n that shouldnt b the case coz its not there property simple its a work place n they should do what they're supposed to not what they want to.