In order to satisfy the requirements of the ITAM audit, OIT is restricting administrator permissions on all UCCS owned devices, which include office and lab computers running both Windows and Mac operating systems.  This change will result in campus members no longer having full administrator rights over their individual workstations or lab computers.  While this will limit your ability to make certain changes to your computers and install certain software, we have found that these changes will not impact normal day to day operation and usage for campus members.  Nonetheless, OIT is ready to quickly assist with any challenges you encounter with these restrictions.


Requesting Exceptions

OIT recognizes that there could be cases where admin exceptions are warranted.  When such cases arise, members of campus leadership, including Deans and Directors, will be required to submit these requests to the OIT Service Desk where they will be reviewed for approval by the Security Team.  Exception requests should identify a valid business need for proper consideration and include the names of the computers affected. 

Requests for exceptions can be submitted by contacting the OIT Service Desk directly.


FAQ

Q:  Does this mean I can't customize my office computer?
A:  You will still be able to do normal customizations such as setting a family photo as your background, but admin changes such as renaming your computer or modifying security settings will be restricted.

Q:  Will I still be able to install the software and applications I need?
A:  Software installs will be restricted to those that have been approved or deemed safe by OIT Security.  These installs may still be restricted to methods approved by OIT, such as the Company Portal. Refer to this article for more information: https://kb.uccs.edu/x/SoF9Fw


Q:  What if I really need local admin permissions to do my job?
A:  Please verify and document that the changes are now preventing you from doing your job duties, and work with your Dean or Director to submit an exception request.  OIT is committed to reviewing and responding quickly to these requests to minimize disruption and downtime.

Q:  Can I keep my admin permissions on a student-facing computer lab that I manage?
A:  Some existing admin exceptions related to student facing computer labs and classrooms have been grandfathered into the new security policy.  If you find you no longer have these permissions, please work with your Dean or Director to submit a new exception request.