Why your work computer will not let you install things

What administrator rights allow

An administrator account on a computer can install software, change security settings, turn off protection and reach every file on the machine. An everyday account can run programs and work with its own files.

When you use a computer as an administrator, so does everything you run. If you open a malicious attachment or a fake download, it gets the same power: it can install itself, hide, disable antivirus and spread.

Why IT removes them

Using an ordinary account for daily work is one of the simplest and most effective protections there is. A great deal of malware fails, or does much less damage, when it cannot get administrator rights. It also stops well-meaning changes that break things, and keeps unlicensed or unsafe software off company machines.

What to do when you need something

• Ask your IT provider to install it. Say what it is for; they may already have an approved option.
• Do not look for workarounds, such as portable versions or personal computers for work tasks.

For IT staff too

The same rule applies to administrators. They should use a normal account for email and browsing, and a separate administrator account only when they need it.