Page Comparison

An EDA (Enhanced Desktop Access) account is a local (non-domain) administrative account intended for users who require access to perform admin tasks.

Please note that you cannot log in to your computer using this account. It is meant to be used with the Windows UAC (User Account Control) prompt as shown in the instructions.

EDA User Check List

• EDA is primarily intended for installation of academic applications
• IT staff will continue to provide management of the desktop computer
  1. EDA users should not modify managed software without consulting with IT staff
  2. EDA users should not modify security settings on the computer  without consulting with IT staff
     1. Examples:
        1. Anti-virus
        2. Operating System/Application patching
        3. Firewall settings
  3. EDA users should inform IT staff when making configuration changes
  4. EDA users should not create local accounts or modify existing accounts

• The EDA user is responsible for licensing any applications installed with EDA
• Do not share EDA account and password with anyone
• Typical EDA user support will be done through the users account by IT staff, via UAC and the local administrator account
• IT staff will be monitoring more closely the operation of computers configured with EDA
  1. Process launched from EDA access
  2. Applications installed
  3. Changes to security settings/applications
  4. EDA users will receive information about EDA use via email
• Due to heightened security concerns, ITS mandates that IT staff review and remediate incidents that occur in violation of the agreement.  Remediation may include loss of EDA privileges.
• Similar to standard desktops and laptops, EDA computers are not backed up, so any data stored locally is unprotected from loss

EDA items of understanding

...

The EDA ("L-")  account enables users to have limited administrative control over their computer. This allows you to customize your system and install applications while maintaining the IT security controls put in place by campus computing policies. You cannot log in to the system with the EDA user account. It should be used in conjunction with your standard NetID account and Windows User Account Control as described in the instructions. For compliance reasons, the usage of the EDA account is logged and will be reviewed in the event of a information security-related matter.

EDA Account Terms and Conditions

• At the point of EDA account configuration, Technology Services' admin accounts are disabled on the system, and the EDA user assumes primary administrator responsibility
• In the event the system becomes unusable due to a misconfiguration or security incident, IT personnel will provide support on a "best effort" basis, meaning that we do not guarantee that the system can be restored to a state that was customized by the users. At the discretion of IT staff, if such an incident cannot be easily remediated, the computer will be restored to a default configuration or original setup

...

• .
• The computer will continue to be subject to domain polices and the automated deployment of Operating System patches, application patches, and antivirus updates that are managed by

...

• technology staff

...

• The EDA user is prohibited from using elevated privileges to perform any of the following tasks
  • Modifying the computer's domain membership

...

• • Elevating another "standard" user account to an Administrator

...