Why your IT administrator uses two accounts

The idea

Administrator accounts can reset passwords, read mailboxes, change security settings and delete data. Everyday accounts read email, browse the web and open attachments, which is where most attacks start.

If one account does both, a single phishing email or bad download gets the attacker everything at once. Keeping them separate means a compromised everyday account cannot change your security settings.

The principles

• Separate accounts: a normal one for daily work, and an administrator one used only for admin tasks.
• Least privilege: each person gets only the access they need for their job. Most staff do not need to install software or change settings.
• Fewer administrators: the smaller the list, the smaller the target. Review it regularly.
• Strongest protection for admins: the strongest multi-factor methods available, and admin sign-ins watched closely.

What this means for everyday users

It is why staff sometimes cannot install software themselves. That is not distrust. It means that if someone does get tricked, the damage stays small.