本地计算机管理员权限？
大家对于开发人员在本地计算机上拥有本地管理员权限有何看法？ 或者至少有能力做到这一点，例如通过runas而不必依赖别人？
What is the opinion of everyone out there about having local admin rights for a developer on their local machine? Or at least the ability to do it such as through runas without having to rely on someone else?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（7）
这可能取决于您想要实现的目标以及您使用的任何 COTS 产品是否需要管理权限。 这可能是使用该产品或使其在您的环境中正确运行所必需的。
对于我所在地区的开发商来说，他们必须获得当地盒子的管理权。 它对于尝试解决问题很有帮助，但并不总是必要的。
您可能不想要它们的一些原因是用户可能没有这些权利或特权。 这可能有助于发现错误或问题，例如将数据写入用户可能没有任何权限的目录。 根据安装位置的不同，用户权限可能会受到限制，因此没有权限可能有助于确保它在预期环境中运行。
This may depend on what you are trying to achieve and if any COTS products you are using require adminstrative priviledges. This might be required to use the product or to get it to run in your enviornment correctly.
For the developers in my area, they have to be approved for admistrative rights for their local box. It has been helpful in trying to troubleshoot issues, but has not always been necessary.
Some reasons you may not want them, would be if the user might not have those rights or priviledges. This might help find errors or issues, such as writing data to directories where the user might not have any priviledges. Depending upon where it is being install, there may be restrictions on the users priviledges, so not having priviledges may help in making sure it will work in the intended environment.
这取决于您所说的“开发人员”是什么意思。
则不要授予本地管理员权限
如果...您的“开发人员”在开发良好、经过验证的环境中接受业务需求并将其逐字转换为程序代码，
请授予本地管理员权限。
。 如果...您的“开发人员”是软件工程师，可以自由地发挥创造力、寻找新的解决方案、挑战软件开发过程的现状，
It depends on what you mean by "Developer".
DO NOT Grant Local Admin if...
Your "Developers" take business requirements and translate them verbatim into program code, in a well-developed, proven environment.
DO Grant Local Admin if...
Your "Developers" are Software Engineers that have the freedom to be creative, find new solutions, challenge the status quo of the software development process.
我认为这是一个好主意。 我赞成。 对于我管理过的所有开发团队，我都是从IT方面坚持这样做的。
另外，我通常会争取允许程序员暂时禁用其工作站上的按访问病毒扫描的权利。
I think it is a good idea. I'm for it. For all the development teams I have managed, I have insisted on it from IT.
Also, I usually push for rights to allow programmers to temporarily disable on-access virus scanning on their workstations.
绝对有必要。 普通用户永远不应该拥有管理员权限。
Absolutely necessary. And regular users should never have admin privileges.
取决于您希望开发人员编写什么。 例如，作为概念证明，我在一台没有管理员权限的机器上启动了 Eclipse + Apache + MySQL + Php (XAMPP)，但我能够做很多事情。 另一方面，我无法在锁定/无管理员权限的计算机上进行有效的 ASP.NET + SQL 开发。
此外，如果正在开发的代码必须在无权限的情况下运行，那么以这种方式开发可能会很有用，例如 winforms 应用程序。
否则，作为一个实际问题，如果网络管理员对公司机器的破坏足够大，开发人员将停止使用它们并使用他们的个人机器，诉讼将停止要求内部开发人员工作并开始雇用外部承包商（他们拥有他们有权使用的机器）到）。 我也见过这些图案。
Depends on what you want your developers to write. For example, as a proof of concept, I fired up Eclipse + Apache + MySQL + Php (XAMPP) on a machine where I didn't have admin rights and I was able to do a lot. On the other hand, there is no way I'd be able to do effective ASP.NET + SQL development on locked down/no-admin-rights machine.
Also, if the code under development has to operate under no-rights, it can be useful to develop that way, e.g winforms apps.
Otherwise, as a practical matter, if the network admins cripple the corporate machines enough, developers will stop using them and use their personal machines, the suits will stop asking internal developers for work and start hiring outside contractors (who do own machines they have right to). I've seen the these patterns, too.
我发现大多数开发工具都要求用户是管理员才能在所有情况下正常工作。 这有点烦人，因为作为开发人员，我们应该切换到非管理员帐户进行测试，但这是可行的。
但是，如果您的问题是“我们是否必须成为管理员用户才能使用我们的工具”，那么我的答案是否定的。 除非您正在编写驱动程序，否则确实没有充分的理由（我能想到的）需要管理员帐户。
I've found that most development tools require the user to be an admin to work correctly in all cases. It's a little annoying since, as a developer, we should switch to a non-admin account for testing, but it's doable.
However, if your question is "should we have to be an admin user to use our tools," then my answer would be no. Unless you're writing a driver, there's really no good reason (that I can think of) where an admin account should be required.
不管这里的人的意见是什么 - 我认为大多数开发人员都会认为他们需要管理员权限 - 问题是您的开发人员是否真正获得了管理员权限最终将归结为组织不同级别的政治、安全政策和线索分配的复杂相互作用。
换句话说，如果你试图对这里的人群进行民意调查以获得争论的弹药，那么你可能已经输了......
Regardless of what the opinions of people here are -- and I think it's a pretty safe bet that most developers are going to think they need admin rights -- the question of whether your developers actually get admin rights is in the end going to come down to a complex interplay of politics, security policy, and Clue distribution at different levels of your organization.
In other words, if you're trying to poll the crowd here to get ammo for an argument, you've probably already lost...