Admin Rights on Laptops: Difference between revisions

Revision as of 10:30, 20 June 2016

see User groups and rights on the wiki for the wiki related article

Data collectors have some special rights to their laptops. They used to have admin rights (see #Legacy).

Usually collectors are part of user group DAT_REGION_ICU_DATA_COLLECTION, this used to be used to define some special rights, not sure if it is still.

One above-normal right still set up as part of the eHealth's CCMDB laptop setup instructions is full rights to c:\ccmdb_data and c:\ccmdb_program. This is to address "when the database exits irregularly when one collector is logged in, and then a second collector who is not an admin logs in and tries to use the software they get an error that the database is read-only".

Legacy

Data Collectors used to have admin rights on the laptops but have not had them since 2015-02.

They used to be required to

run Truecrypt, which is no longer used.
view and make changes to many settings; to avoid having collectors off-line while we make our way out to sites we need to be able to walk collectors through these over the phone since we don't have remote control access to the laptops; this was no longer an acceptable reason

@@ Line 1: / Line 1: @@
 ''see [[User groups and rights on the wiki]] for the wiki related article
-Data collectors need admin rights on the laptops. Usually collectors are part of user group DAT_REGION_ICU_DATA_COLLECTION which is in turn in a group that gives it admin rights.
+Data collectors have some special rights to their laptops. They used to have admin rights (see [[#Legacy]]).
-== Transition ==
+Usually collectors are part of user group DAT_REGION_ICU_DATA_COLLECTION, this used to be used to define some special rights, not sure if it is still.
-As of 2015-02 we are setting up laptops to no longer have this right and use [[Bitlocker]] instead.
-== Why collectors need admin rights ==
+One above-normal right still set up as part of the [[eHealth's CCMDB laptop setup instructions]] is full rights to c:\ccmdb_data and c:\ccmdb_program. This is to address "when the database exits irregularly when one collector is logged in, and then a second collector who is ''not'' an admin logs in and tries to use the software they get an error that ''the database is read-only''".
-The following will be addressed by using [[Bitlocker]]
-* during testing to run without admin rights with Brandon Deamel 2013-05 we found that [[TrueCrypt]] won't run without admin rights; we were going to see if we can change setup to not require admin rights but will put that on hold for now.
-The following should be addressed by having full rights to those directories, as are set up when eHealth uses the [[eHealth's CCMDB laptop setup instructions]].
-* when the database exits irregularly when one collector is logged in, and then a second collector who is ''not'' an admin logs in and tries to use the software they get an error that ''the database is read-only''; making the second collector an admin fixes this.
-The following would no longer be accepted as a reason as of 2015-02:
-* admin rights are required to view and make changes to many settings; to avoid having collectors off-line while we make our way out to sites we need to be able to walk collectors through these over the phone since we don't have remote control access to the laptops
+== Legacy ==
+Data Collectors used to have admin rights on the laptops but have not had them since 2015-02.
+They used to be required to
+* run [[Truecrypt]], which is no longer used.
+* view and make changes to many settings; to avoid having collectors off-line while we make our way out to sites we need to be able to walk collectors through these over the phone since we don't have remote control access to the laptops; this was no longer an acceptable reason
 [[Category: IT Instructions]]
 [[Category: New Hire]]

Admin Rights on Laptops: Difference between revisions

Revision as of 10:30, 20 June 2016

Legacy

Navigation menu

Search