Re: Local admin rights
The software is written and/or developed under admin, then for whatever demented reason it's simply promoted to prod release without proper QA, it's simply easier to just say "Install/run with admin" rather than do it properly. I'm not blaming devs, they're often under pressure to deliver but we all share the blame on this sort of bad practice. Ops people shouldn't ever give admin rights without full auditing, or at the very least a time limited set of admin rights, devs should only ask and use admin rights when there is absolutely no other choice and it's been discussed with the admin teams why it's needed. We can all play our part in stopping the stupid practice of just being lazy and sticking everything under control of an admin account.
Finally if done right, a user and their system is not left at the mercy of the scum who will happily screw your PC over and leave you with nothing.
Biting the hand that feeds IT
