The Great Debate: Should You Set Up Users as Admin or Standard?
What kind of accounts should you create when you provision Mac computers for your users: admin or standard? It’s an age-old question in Apple IT. It’s an argument that pulls on many threads, including user convenience, IT workloads, and organizational security. And it has no easy, one-size-fits-all solution, which is why it’s been around so long. To dig into that argument a bit and tease out some of those threads, Kandji’s Steven Vogt chatted recently with Rich Trouton. Rich has been doing Mac and server administration for over 20 years, in a variety of environments from higher ed and government to advertising and software development. He’s currently at SAP, where he supports that company’s Apple community. Rich has also written extensively about managing Apple devices for Peachpit, Apress, and MacTech Magazine; his most recent book with co-author Charles Edge is Apple Device Management: A Unified Theory of Managing Macs, iPads, iPhones, and Apple TVs. He was also instrumental in bringing the SAP Privileges app—which addresses many of the concerns discussed below—to the Mac admin community. Here’s a recap of that conversation. Check out the entire presentation here.