Re: IT is still a blocker more than an enabler
Of course it is, manglement wants control and privileges are not for the hoi-polloi.
As a freelance consultant, I see many companies from the inside. As far as IT is concerned, my customers are all over the map. One has a strict non-admin policy, which does not bother me because my workstation there has the stuff I need to work. Another has a strict no admin policy for employees, but a rather lax policy for consultants that work with the IT department, meaning that my workstation there functions under admin access - and my workstation is the one dedicated to external consultants, meaning that every other guy or gal that works there uses that workstation. With admin access.
And lets forget about the companies where I am the only person who knows their network and how to fix things - which is frightening when you know that I am not a network admin.
I recently got a new contract at a large administration which has an interesting policy. Normal users do not have admin access and software requests must be approved by manager and deployed by IT. It works. But some people, me for example, do not fit the general population and get granted an admin account. Now wait before you howl : the admin account is not the work account. I can only work on the work account, but when I need to install something that is not in the IT list of approved software (because they had no idea), I can do so in my work account by giving my admin account login and password. So I have the flexibility to do what I need, with the security of my work account. Not bad, I think.