Information Security Handbook

Using a normal user account where possible

In most cases, an administrator account is not needed for most work done on the enterprise information system. Only a small percentage of your organization's workforce is performing IT administration as their primary job function, and as a result, they do not need to use an administrator account as their daily driver account:

• It is highly recommended that even IT administrators use a nonprivileged user account as their normal login:
  • The IT administrator would then elevate their privileges using the Run as administrator in Windows (as shown in the following screenshot) or sudo in Linux:

• Administrator ...