Page Comparison

An EDA (Enhanced Desktop Access) account is a local (non-domain) administrative account intended for users who require access to perform administrative tasks.

Please note that you cannot log in to your computer using this account. It is meant to be used with the Windows UAC (User Account Control) prompt as shown in the instructions.

EDA User Discussion Check List

EDA items of understanding (Download and print this page. Complete your section and ask your Department Authorizer to sign the next section)

...

The EDA ("L-")  account enables users to have limited administrative control over their computer. This allows you to customize your system and install applications while maintaining the IT security controls put in place by campus computing policies. You cannot log in to the system with the EDA user account. It should be used in conjunction with your standard NetID account and Windows User Account Control as described in the instructions. For compliance reasons, the usage of the EDA account is logged and will be reviewed in the event of a information security-related matter.

EDA Account Terms and Conditions

• At the point of EDA account configuration, Technology Services' admin accounts are disabled on the system, and the EDA user assumes primary administrator responsibility
• In the event the system becomes unusable due to a misconfiguration or security incident, IT personnel will provide support on a "best effort" basis, meaning that we do not guarantee that the system can be restored to a state that was customized by the users. At the discretion of IT staff, if such an incident cannot be easily remediated, the computer will be restored to a default configuration or original setup.
• The computer will continue to be subject to domain polices and the automated deployment of Operating System patches, application patches, and antivirus updates that are managed by technology staff
• The EDA user is prohibited from using elevated privileges to perform any of the following tasks
  • Modifying the computer's domain membership
  • Elevating another "standard" user account to an Administrator