Description
CALS OIT is in the process of aligning computer administrator rights with Cornell University Policy 5.10 (page 11, Authentication and Authorization). Our goal is to provide enhanced security for managed computers by having all CALS users log in for day-to-day operations with standard user privileges (not administrator). Not only is this principle of least privilege required by Cornell policy, but is recommended by the Cornell Audit Office, Cornell Information Technology Security Office, and Gartner (an IT consulting firm), and it is a standard industry best practice.
Schedule
The removal of administrator privileges for NetID accounts on all managed computers will commence in the Summer of 2023. Administrative Managers will receive notice via email two weeks prior to this configuration change, and affected users will receive on-screen notifications one week prior.
The removal of administrator privileges will occur on different schedules for Windows and Mac users. Below is the current schedule for both platforms.
| Mac Admin Removal Date |
Windows Admin Removal Date |
Affected Departments |
| Tuesday, July 11 @ 4pm |
Tuesday, August 8 @ 4pm |
AgriTech Administration
AgriTech Buildings & Properties
AgriTech Field Research Unit
Alumni Affairs and Development
American Indian and Indigenous Studies Program
CALS Office of Sponsored Research
Capital Projects and Facilities Services
Cornell Botanic Gardens
Cornell Cooperative Extension
Cornell University Agricultural Experiment Station
Dean's Office
Entrepreneurship at Cornell
Financial Services
Human Resources
Northeastern Integrated Pest Management Center
Office of Academic Programs
Office of Marketing and Communications
Pesticide Management Education Program
School of Integrative Plant Science (Administration)
Sea Grant
Senior Associate Deans Office, and Executive Dean's Office |
| Tuesday, July 25 @ 4pm |
Tuesday, September 12 @ 4pm |
Biological and Environmental Engineering
Integrated Pest Management
Communication
Computational Biology
Division of Nutritional Science
Food Science and Technology
Global Development
Landscape Architecture
Microbiology
Molecular Biology and Genetics
Office of Undergraduate Biology |
| Tuesday, August 08 @ 4pm |
Tuesday, September 26 @ 4pm |
Animal Science
Applied Economics and Management
Entomology
Horticultural Sciences
Natural Resources
Plant Biology
Plant Breeding and Genetics
Plant Pathology and Plant-Microbe Biology
Soil and Crop Sciences
Weill Institute for Cellular and Molecular Biology |
Performing Tasks That Require Administrator Privileges
CALS OIT has developed solutions for those who need to temporarily elevate their account to administrator for certain tasks. If you require administrator privileges on a CALS OIT managed computer, follow our instructions for temporarily granting administrator privileges through the Self-Service portal.