Removing excess administrator privileges is considered to be one of the most essential risk mitigation strategies for organizations and IT departments globally; immediately improving the security posture of any organization and enabling regulatory compliance.
This approach of 'least privilege', where sysadmins access servers with a standard account, with no more permission than is necessary to complete their day-to-day tasks, results in the reduction or complete removal of administrator accounts from the network.
However, while this approach significantly reduces the attack surface and potential for security breaches, it has traditionally created challenges in the data center. Without a carefully considered approach to admin rights removal, sysadmins find themselves overly locked down and prevented from performing their day-to-day roles.
The solution lies in privilege management and application whitelisting technologies, which enable the effective removal of powerful administrative rights, without restricting the behavior of the sysadmin, so that security and productivity are both improved.