Admin Rights on Laptops

see User groups and rights on the wiki for the wiki related article

Data collectors need admin rights on the laptops. Usually collectors are part of user group DAT_REGION_ICU_DATA_COLLECTION which is in turn in a group that gives it admin rights.

Transition

As of 2015-02 we are setting up laptops to no longer have this right and use Bitlocker instead.

Why collectors need admin rights

The following will be addressed by using Bitlocker

• during testing to run without admin rights with Brandon Deamel 2013-05 we found that TrueCrypt won't run without admin rights; we were going to see if we can change setup to not require admin rights but will put that on hold for now.

The following should be addressed by having full rights to those directories, as are set up when eHealth uses the CCMDB laptop setup instructions.

• when the database exits irregularly when one collector is logged in, and then a second collector who is not an admin logs in and tries to use the software they get an error that the database is read-only; making the second collector an admin fixes this.

The following would no longer be accepted as a reason as of 2015-02:

• admin rights are required to view and make changes to many settings; to avoid having collectors off-line while we make our way out to sites we need to be able to walk collectors through these over the phone since we don't have remote control access to the laptops