Local Admin Rights

Tags LAR

Overview

All of us at UFV rely on computers to deliver services to our students, faculty, and staff. With new applications, features, and cloud services being delivered, we are updating to ensure we can all continue to safely use these new resources and to better protect you, your data, and UFV.

 

What is changing?

We are changing the type of account that people are given when they log in to a UFV computer. Previously, everyone had an account that had administrator rights, which means full access to the system. Administrator access is often used by attackers to cause widespread infection.

Microsoft and best practices recommend that people are granted standard account rights. A standard account allows you to use all installed programs, and generally do everything you commonly need to perform. To install programs, IT is rolling out services that will let you have the option of having IT install a program or use self-service tools to do it yourself. So there will be some changes - but ITS will be on hand to help you.

Why are we doing this?

Bad actors often use malicious websites, phishing emails, and malware programs to attack computer systems. We are constantly watching and defending against these threats that try to scam our people, attack systems, and steal data. Most ransomware and cyber attacks are performed by criminal gangs that are motivated by greed, looking for easy payoff.  As an open and collaborative community, the University is an appealing target.

To perform the attack, the bad actor will often start with a phishing email or a stolen password, and then use them to access a company computer. Once on the computer, they can install programs to give them complete control and make it harder for ITS to detect and fix. But they don’t want just one system - the attacker's goal is to infect as many systems as possible, and cause as much harm as possible so that they can ask for a large ransom. So, they will try to control as many computers and as many accounts as they can.

By limiting accounts to have standard user permissions, instead of full administrator access, it makes it much harder for an attacker to take complete control of a system. This helps to protect you, your data, and UFV.  

What are the benefits?

Not only does this help stop many cyber attacks, but it also helps to keep UFV workstation settings consistent. This will improve IT’s ability to help you as our systems become more reliable, dependable, and consistent.

What can I expect after this change?

  • Applications, browsers, and the internet will work the same as before.
  • Accessing your folders, files, and drives will work the same as before.
  • Some software can be installed the same as before.

In some cases when installing software, you may see a message requesting administrator credentials:

Message requesting administrator credentials when installing software

If you see this prompt, this software needs to be installed through the Software Centre or Microsoft Store.  See our articles: Install through Software Center or Install through Microsoft Store

IT Services is also available to assist in installing software. Simply visit the IT Services portal to request a software install

Need more information?

How to install a Software Application through Software Centre
How to install a Software Application through Microsoft Store
Submit a Software Install Service Request

Contact the IT Service Desk: by phone: (604) 864-4610, by email at itservicedesk@ufv.ca, or on campus (Abbotsford G131, CEP A0006).
Contact the Cyber Security Team: by email at cybersecurity@ufv.ca.

Details

Article ID: 4539
Created
Mon 10/31/22 11:21 AM
Modified
Fri 3/15/24 11:07 AM