[masraum]

Originally Posted by KaptKaos

Of course I assume you mean local admin, but geez that bad enough!

One outbreak and kiss your job goodbye. The first "consultant" that comes in to review the aftermath will see this and you will be out faster than you can imagine!

You are the tool. Management makes the decisions. Give them the information and make them decide how to wield the tool. Cover your arse with the documentation of their decisions and your notifications to them of such.

I wouldn't let another day go by that I didn't tell the CIO, COO or other such officer of the risks of having 2500 users with local admin rights.

Fortunately, that's on someone else's butt, not mine. And yes, it'l local admin access.

Also, we have a "Security team" and I'm not on it. They are the policy makers. So if this goes south, it's not really on my head. I'm just the voice of reason coming in telling folks how bad things are and that something needs to be done.