Summary: Employees should use standard accounts for email, web browsing, and everyday work. Administrator access should be limited to approved IT tasks and protected with a separate account.Administrator access often starts with one request. An employee needs to install a printer, update a specialist program, or change a setting on their computer.Giving them administrator access gets the job done. The problem is that the access usually stays after the request has been completed.From then on, the employee can approve other software installations and make changes that would normally require help from IT. If they install the wrong program or someone takes control of their account, those permissions can also be used to change the computer.For everyday work, employees should use standard accounts. Administrator access should be kept for tasks that require it.What administrator access allows someone to doAn administrator has more control over a computer than a standard user.On Windows,
