Skip to content
Permalink
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
32 lines (20 sloc) 2.23 KB

Admin profiles and standard user profiles on devices

As part of our commitment to secure working practices, we install separate admin and standard user profiles on laptops. The reason this restriction is in place is to prevent the accidental downloading and installation of malicious software on company devices, to close an attack vector, and to protect both Made Tech and our customers.

Because of our heavy use of cloud-based software, we do not believe removing default admin access will prevent people from working productively. If a team member can provide a business case for why they need to retain admin access to their device as default, the ISMS governance team will review this policy.

Business Teams

Separate admin and standard profiles must be installed on devices being used by members of business teams at Made Tech (Sales, People, Operations etc.), who do not engage in engineering and active development.

Your device will be set up with separate admin and standard profiles as standard. You will be given access to the admin profile so you can install any necessary software.

If you are a member of a business team, and using a device with split admin and standard user profiles, you should follow these guidelines:

  • You should always log into your standard user profile as default.
  • You can download approved software from the list below using your admin credentials, or any software necessary for your regular work.
  • You should use your admin credentials to install any software or OS updates on a regular basis to ensure you are always running the latest version.
  • If you are uncertain about what you are downloading and installing, please talk to the CSO or ISMS manager for support.

Engineering and Delivery Teams

We have agreed a clear business case for people in engineering roles to use an admin profile on their device as default because of the need to install packages related to software we're developing on an almost daily basis.You will still be prompted for authentication whenever you utilise admin capabilities.

List of Approved Software (updated 12/06/2019)

  • Google Chrome
  • Firefox
  • Slack
  • Spotify
  • Evernote

For Mac users, any app downloaded from the App Store is considered safe to install on your device.

You can’t perform that action at this time.