Half of IT Pros Surveyed Let Users Install Their Own Software

Just about half of the IT admins recently surveyed by security provider Bit9 say they allow users to install their own software.

Released this week, Bit9’s Endpoint Security Survey 2011 questioned 765 IT professionals to try to gauge the security risks faced by their organizations as a result of user administration.

A full 51 percent said they allow users to download and install their own software, while 49 percent said they prevent it. Among those who said they don’t allow users to install software, 68 percent said they do so by restricting administrative rights, 50 percent do so via written policies based on the honor system, and 24 percent said they use application whitelisting.

Among those IT admins that do let their users install software, why types of applications have they discovered on users’ PCs? Some of the most common programs include digital music apps such as iTunes, instant messaging apps, social media tools, games, and spyware. A fair number have also found unlicensed software, malware, and peer-to-peer programs.

When asked for the most “unusual” software founds on users’ desktops, the IT pros cited malware and spyware, games, peer-to-peer apps, iTunes and Limewire, and “You name it,we’ve found it.”

Overall, a majority 74 percent of those polled said that only software approved by the business is allowed on user PCs. Another 23 percent said that only software deployed by the business is allowed. And 17 percent said that users can install anything they want.

Though many organizations allow users to install software, most do limit administrative rights. Among all those surveyed, a full 49 percent said that only 1 to 20 percent of all users have admin rights. Only 11 percent said that they grant all of their users admin rights.

Looking at another angle, the survey found that most companies let employees use their own mobile devices on the job. Among those polled, 41 percent said that such users are only allowed to connect to an isolated public network, while 27 percent allow users with personal mobile devices to connect to the Intranet.

The survey clearly shows some strengths and weaknesses in user policies. On the plus side, most IT admins limit administrative rights among their user population, restricting how much trouble they can get into. But by not locking down the desktops and letting users install their own apps, IT can open individual user PCs and the network in general to certain risks.

Of course, with the growing consumerization of IT, locking down the desktop so that the user can’t do much certainly can be a challenge. Users do demand and in some cases require a certain amount of freedom and flexibility over what they can do on their PCs. Ultimately, it’s up to IT and corporate management at each individual company to decide exactly where to draw the lines.

Want to learn more about the latest in communications and technology? Then be sure to attend ITEXPO West 2011, taking place Sept. 13-15, 2011, in Austin, Texas. ITEXPO (News - Alert) offers an educational program to help corporate decision makers select the right IP-based voice, video, fax and unified communications solutions to improve their operations. It's also where service providers learn how to profitably roll out the services their subscribers are clamoring for – and where resellers can learn about new growth opportunities. To register, click here.

Stay in touch with everything happening at ITEXPO… follow us on Twitter