Admin Rights on Laptops

see User groups and rights on the wiki for the wiki related article

Data collectors have some special rights to their laptops. They used to have admin rights (see #Legacy).

Usually collectors are part of user group DAT_REGION_ICU_DATA_COLLECTION, this used to be used to define some special rights, not sure if it is still.

One above-normal right still set up as part of the Laptop Setup is full rights to c:\ccmdb_data and c:\ccmdb_program. This is to address "when the database exits irregularly when one collector is logged in, and then a second collector who is not an admin logs in and tries to use the software they get an error that the database is read-only".

Also they have rights to add to the all-users / public desktop, e.g. via Desktop install.bat

Legacy

Data Collectors used to have admin rights on the laptops but have not had them since 2015-02.

They used to be required to

• run TrueCrypt, which is no longer used.
• view and make changes to many settings; to avoid having collectors off-line while we make our way out to sites we need to be able to walk collectors through these over the phone since we don't have remote control access to the laptops; this was no longer an acceptable reason