Principle of Least Privilege / Service

About7Narwhal

Hey all,

I have started going through SCCM and other such configuration tools at a mile high level and have run into a rather baffling trend regarding Least Privilege / Service and user convenience. The stronger I make my Least Privilege and Service practices, the harder computing appears to become for my "End User" which is me in this case.

So on to the question, how do you guys ensure a good balance in a live environment? Do you track Service Desk calls and determine if a change is needed or do you simply bend and provide more access than is needed for simplicity sake? It seems almost impossible to implement this type of methodology in a live environment without causing productivity loss, even after proper testing.

Perhaps there are best practices I am missing, so input is more than welcome.

Thanks

NotHackingYou

Try thinking from a perspective of nothing more than they need to do what they need to do.