A question was asked by one of the church IT directors: Why do we feel so strongly like we need to lock systems down?
Here's my response:
- While not wanting to knock Microsoft, we do need to recognize that their operating systems (Windows) have a lot of security holes. They know about many of them, and there are apparently many they don't know about.
- Microsoft has taught us to engineer our networks to make up for those holes. By teaching us to not give users administrative security rights, Microsoft is teaching us to restrict our users to make up for their limitations.
- Using programs like Ghost to image systems eliminates the issues that a user with local admin rights might experience because they allow you to re-write the local hard drive in a matter of minutes.
- It empowers users to do what they need to when IT is not available to help,
- It allows updates to be installed as needed without IT help, and thus
- It reduces the workload of the IT team.