User Privilege Policy

1.0 Overview :

This user privilege policy is an internal IT policy and defines the privileges various users on the organizational network are allowed to have, specifically defining what groups of users have privileges to install computer programs on their own or other systems. This policy defines the users who have access to and control of sensitive or regulated data.

This policy defines internet access to specific sites for some users or other ways they may or may not use their computer systems.

2.0 Purpose :

This policy is designed to minimize risk to organizational resources and data by establishing the priviliges of users of data and equipment on the network to the minimim allowable while still allowing users to perform job functions without undue inconvenience.

2.0 Local Computer Privileges :

There are three main categories of users on a computer or network. These categories include:

1. Restricted user - Can operate the computer and save documents but can't save system settings.
2. Standard user (power user) - Can change many system settings and install programs that don't affect Windows system files.
3. Administrators - Have complete access to read and write any data on the system and add or remove any programs or change system settings. The majority of users on most common networks should be restricted users on their local computers. Only users with special training or a need for additional access should be allowed to change system settings and install programs that are not operating system programs. This is because many viruses and adware or spyware may be installed in a subtile manner by