Starting a new job. The people are cool. They explain me the project. I open my computer and I’m not admin of it. Why it’s not automatic to add dev like admin of the machine. It’s fun to pass the first day of work waiting to learn the job. Please let me install my IDE and tools that I need to work with.

Even devs shouldn't routinely have admin rights unless their machine is completely isolated. That should only be allowed if a specific need is there, and then only for as long as it takes.

@Fast-Nop it all depends, if the IT department is not good enough or fast enough it will seriously hamper the progress.

I could accept dual accounts if you want to avoid running as admin, but i have always been local admin, and many tools actually do not work well without it, at least on windows.

On linux its a whole other matter, there you can get by without.

@Voxera Given the increasing damage of security incidents under Windows, IT is right to be more restrictive. The dev departments should be looking for tools that aren't stuck in the bad old Windows XP era, or have dedicated and isolated development / test machines. Maybe in some isolated network or so, and certainly no internet access.

@Voxera and in the worst case some guys have developed podman.

@Fast-Nop we work towards a no trust network internally which means no shared drives, internal firewalls between areas, no admin rights outside of devs.

But the platform out site is built in is tightly integrated into iis and that requires admin rights to debug even locally.

And not being able to debug is a quite big problem :/

@Voxera IIS. oO There's the problem.

This is why I love working on my Mac. Boss just purchases whatever one I want and the emails me saying “your new MacBook is in the goods in warehouse”. I’m the one to unseal the box, set it up how I please with my personal iCloud and only my fingerprint/password that’s only known to me. And I have full admin access to not only my own Mac, but I give my ssh key to our systems admin and I have full access to our entire infrastructure.

Perks of being trusted I guess.

@Fast-Nop not really the iis but the platform running on top.

If it was completely inhouse built it would be able to run under iis express which can be run in user process but the cms plattform only works with the full iis.

And replacing the cms is a larger project ;)

@Voxera That's the problem if you base stuff on IIS because this kind of lock-in is exactly what Microsoft wanted to achieve.

@Fast-Nop depends, in this case its the cms that is the problem.

Without that we could go .netcore and use windows or linux but the cms is net framework.

But we will see, we might get to solve it in a year or so ;)