It is usual that there are computers that are used by several people or that there are a series of computers that you want to control from a specific one, such as in companies or schools. In these cases, an administrator account is usually created, which is the one that has the power to manage all these accounts on said Windows 10 computer. Although it is important to take certain aspects into account when using these types of accounts. For this reason, Microsoft itself gives some advice.
Microsoft wants lAdministrator accounts in Windows 10 are used appropriately. Therefore, in this way, it will be possible to avoid problems with privacy issues or make the use of them easier for users. These types of aspects are essential
Limit internet access
The first aspect that they comment from Microsoft is that said administrator account shouldn't have internet access. Although the firm leaves us with some reasons for this. Typically, administrators are those who have access to the most sensitive data. Therefore, they are usually the main target in the event of an attack. So the number of people who have privileges must be limited and the use of this account must be limited.
Therefore, in the case of companies, it is recommended that a separate device where that administrator account is used. In addition, it is important that the device in question is kept up to date at all times. Above all, security updates are essential in this regard. In addition to some really high security controls in any case. That is why it is necessary to limit Internet access, as an important security measure in this case.
Reduce remote use
On the other hand, you should try to prevent as much as possible that there is administrative tasks that are run remotely. The isolation of the administrator's identity is essential. This means that the identity of those users must be created from a separate namespace, which does not have access to the Internet. Also, ideally, it should be different from the identity information of the specific employee.
On the other hand, the company comments that it is recommended that there is no persistent access. This means that administrator accounts should not have any privileges by default. In this regard, Microsoft recommends that accounts be required to request JIT (just in time) privileges. So you are going to be given access for a finite amount of time, so the chances of something happening are limited. It must also be remembered that in this case, said visit is recorded in a system.
Do not use administrator account at home
It may happen that there are users who make use of these types of accounts at home. It can happen if there is a computer that is used by several people, which ends up creating an administrator account. Although from Microsoft itself do not recommend using this account by default on Windows 10.
It is logical that many users bet on using this type of account. Since it is something simple, easy to use, in addition to having the great advantage of having access to everything and being able to execute many changes in the operating system. But, this is something that has its risks. Since what you install or if something is installed without you noticing, you can have privileges within the entire system. Which causes a lot of problems.
In fact, as Microsoft itself has revealed, there are various studies that blame many or most security problems to administrator accounts. Therefore, it is recommended for the company to have a normal account, without privileges, to use on a day-to-day basis. While having an administrator for administration tasks in the system.