Administrator rights or elevated privileges let you install software and patches but they also increase the risk that malware can install and run itself, and exploit any vulnerabilities. This can put the PC, the data stored on it, and the whole network at risk.
You may apply to have elevated privileges if you are a full member of staff or postgraduate research student and have a work-related need to make administrative changes to a University Windows computer that you have sole use of.
Please familiarise yourself with the University’s policy regarding the use of administrator privileges.
The University provides a range of self-service tools to reduce the requirement for elevated privileges.
What are elevated privileges?
Elevated privileges allow a user of a PC to install software, peripherals and change the set-up on the PC by themselves.
Typical cases where elevated privileges may be granted:
- You are a researcher and need to install lots of different applications frequently.
- You carry-out field work on a laptop that requires you to work away from UEA.
Typical cases where elevated privileges may not be granted:
- You need to install a peripheral device, such as a webcam, that do not ‘plug and play’. This is likely to be a single request and the IT Service Desk can do this for you.
- You do not need to install new applications frequently. Wherever possible, IT Services will add the application to the UEA Applications Catalogue or install it manually for you.
- You use a limited number of applications that need elevated permissions to be able to run, install and apply add-on packages. IT Services can elevate permissions on a per application basis to enable you to carry on working without giving elevated rights over the whole desktop.
- You store data that has statutory or compliance (DPA, PCI) requirements that demand a PC have no elevated privileges.
Applying for elevated privileges
Before being granted access you must agree to the following:
- By using elevated privileges, you make your computer non-standard. While IT Services will make every effort to assist, we can only provide limited help in fixing PCs which have unknown and unsupported software or system configuration changes. If your PC breaks, the only way to fix it may be to wipe it and return it to a standard configuration.
- Individuals installing software themselves are responsible for that installation.
- Do not use elevated privileges to update or modify automatically installed software. This may break future security updates.
- Always keep a copy of any important data in a University network file-store.
- Do not use elevated privileges to access other people's data.
- You should only install software if you have an appropriate license and the software is required for your work. If unsure, please contact the IT Service Desk.
- IT Services still needs access to your computer. Do not install security software, remove administrative rights or change passwords that relate to our access.
- Do not remove your computer from the UEA “Domain”.
- Please do not change your computer's network settings while connected to the UEA network.
Elevated privileges will be reviewed on a regular basis and will be removed if no longer required.
Request Elevated Privileges
- Please contact the IT Service Desk (firstname.lastname@example.org or telephone #2345).
- Describe your requirements and accept the above terms regarding elevated privileges.
- The IT Service Desk will assign the following category to the request: Core Services > IT Account > Permissions & Enrolments > Change / Remove Access
- Your IT Support Manager will record the request in a log.
- Your IT Support Manager will review the request. If granted, your IT Support Manager will record the exception in a risk log and set a review date.
- IT Support will set-up administrator rights on the required device and these will become active after the user has logged on whilst connected to the UEA wired network.