The user of the machine’s domain account in cases where local administrative rights are necessary can register for admin rights. A request for administrative access can be initiated at http://istreg.rbhs.rutgers.edu/ from any University workstation.
If temporary administrative rights are needed, a request needs to be made to the Tech Leads group. If the user is added to the Administrator group on the workstation, user rights will be restored to normal upon a system reboot. If the user is added to the department ‘Workstation Administrators’ group in Active Directory by the Tech Leads, a script will run each Sunday to reset the departmental ‘Workstation Administrators' group, or they may be removed by the Tech Leads, or the user may be removed by an Administrative audit.
Users are not automatically granted Administrative access to their workstations. Administrative access to a user’s workstation must be requested via application, authorization. Administrative rights to a workstation is required if you need to install programs, manage your machine or in some cases run programs/applications. For a user to be authorized his/her workstation must be part of the Core Domain. User must have a core login. Signature from the manager or department head will be required in the authorization form.
Problems or questions concerning administrative access should be directed to ___________.
After a workstation is joined to the Core domain, a 15-minute Screen Saver lock will be enforced. The workstation will automatically go into a screen saver mode and require the ctrl-alt-del plus the user’s password to proceed. The Screen Saver lock is a security feature that was implemented as part of the “HIPPA” security initiative. Clinical Workstations being logged on with a clinical or “Generic ID” are exempt from the Screen Saver lock. The Generic ID does not have local admin rights or rights to department shares so minimal damage can be done while logged on.
Workstations will conform to a standard hardware configuration. The use of a standard operating system and hardware requirements simplifies support and development environments, increasing system manageability.
All workstations will be registered with the Bradford network authentication system and be members of the Core Domain as described in the Domain Workstation Build document. Users will authenticate to gain access to local and network resources.
The Symantec Anti-virus client is the required RBHS standard program for all workstations. The virus definition files will be centrally managed and updated by the Symantec console.