Why do so many piece of Hardware come with windows only software requiring admin right for installation

Submitted ⁨⁨9⁩ ⁨hours⁩ ago⁩ by ⁨Ziggurat@jlai.lu⁩ to ⁨nostupidquestions@lemmy.world⁩

I ordered a data-logger for a work-related project, Which comes with windows software and need admin priviledge (that I don’t have due to corporate IT policies). So I lost 2h going to the IT department trying to get someone with admin right installing this driver :(

What’s the reason hardware come mostly with Windows driver (rather than Linux) and why do these software/driver need admin privilege for installation where their customer base are professional who often don’t have the right privilege on their PC ? Is there something technically forcing the privilege elevation to install a driver ?

source

Comments

Sort:hotnew top

Nollij@sopuli.xyz ⁨8⁩ ⁨hours⁩ ago

Is there something technically forcing the privilege elevation to install a driver ?

Yes. With few exceptions, drivers need admin permissions to be installed. In part that’s because they need admin permissions to run, and malicious drivers have absolutely been exploited in the past.

Some hardware (e.g. mice, keyboards, storage) don’t need additional drivers to be installed, but that’s because the OS uses generic drivers, or has a whitelisted source (e.g. Windows Update)

source
Nollij@sopuli.xyz ⁨7⁩ ⁨hours⁩ ago
Also, you asked 3 completely different and unrelated questions:

Why do drivers need admin permissions?

Why do devices only come with Windows drivers?

Why are corporate IT policies the way they are?

#3 could be broken down even further, covering how/when admin is granted, as well as how devices are procured.

At my (large) employer, we absolutely would’ve told you to pound sand for getting that device outside of official channels and bypassing a security review. Especially since you described it as a data logger.
source
- Adderbox76@lemmy.ca ⁨6⁩ ⁨hours⁩ ago
  
  Why are corporate IT policies the way they are?
  
  I thought about this the other day when asking my IT department why they won’t let me carry a USB stick between home and work to be able to work from home and instead lock down the USB access and instruct me to use Google Drive instead…
  
  I decided that most corporations only cosplay their IT security inasmuch as it only matters up to and not beyond the point of economic convenience.
  
  If any of these companies truly cared about security, they would at the very least be using a hardened fork of Chrome with Google Services stripped out. They’d be self-hosting their own servers connected only via a VPN or some sort.
  
  But that shit takes money and staff to maintain it. So they’ll give everything to third parties to manage instead and then send out pop-quiz emails about phishing every couple of weeks followed by sternly worded emails when a person fails it.
  
  (Sorry…off my anti-depressants until pay day, so I have a lot of micro rants that have built up…haha)
  
  source
MuskyMelon@lemmy.world ⁨8⁩ ⁨hours⁩ ago
If it was Linux, you’d still need sudo rights to install a driver and you’ll have to run through the same mousetrap, just Linux not Windows.

source
- ryannathans@aussie.zone ⁨7⁩ ⁨hours⁩ ago
  Though Linux has a MUCH bigger list of inbuilt drivers ready to go in the kernel
  
  source
  - stinerman@midwest.social ⁨7⁩ ⁨hours⁩ ago
    Linux distros have to ship all these drivers because otherwise someone would try that distro and say “nothing works, this sucks” if they had to go hunt for drivers to install. Windows computers really are the same way, but they’re almost always preconfigured.
    
    source
ramble81@lemm.ee ⁨8⁩ ⁨hours⁩ ago
Even if it didn’t, you can bet your IT department would have a GPO or policy preventing its installation. Why do you think that you can bring and hook up a piece of unapproved hardware that may do more than what it says without the company (who owns the device) vets it?

source
mspencer712@programming.dev ⁨9⁩ ⁨hours⁩ ago
Market share. Basic permissions model.

source
- spankmonkey@lemmy.world ⁨8⁩ ⁨hours⁩ ago
  Which is less time consuming and therefore cheaper.
  
  source
somewhiteguy@lemmy.world ⁨9⁩ ⁨hours⁩ ago

due to corporate IT policies

I think that answers your question right there. If you got the device outside of that realm, you’d probably have no issues. Talk to your security and IT people about why that is. There are huge security risks for people being admin over their systems.

For context, I run my home computer as a non-admin user most of the time, unless I need to make some deep changes, which is not often. Maybe once a month. This saves me from accidentally installing a rootkit or other software. I run my children and wife under the same context so they don’t need to worry either. Yes, it takes me a bit of time to go through and approve some updates, but that’s worth it to not need to worry as much about viruses and keeping data secure.

The amount of time it takes your IT department to do something is another complaint that should be directed at them. We get those kinds of complaints constantly, but it’s the fact we have everyone asking the same things or completely meaningless ones. You’re in the queue, please give us patience.

source
- Deestan@lemmy.world ⁨7⁩ ⁨hours⁩ ago
  
  This saves me from accidentally installing a rootkit or other software.
  
  This sentence surprised me a bit. When and how often do you run that risk?
  
  source
  - somewhiteguy@lemmy.world ⁨6⁩ ⁨hours⁩ ago
    Before the last few years, I was on a lot of torrenting sites. Really before a lot of software became what we now know as FOSS, it was the way we traded software. So, there was a potential much higher then than now. I’ve been doing this computer thing for closer to 30+ years, so my habits come from headaches and other learned lessons.
    
    source
DomeGuy@lemmy.world ⁨8⁩ ⁨hours⁩ ago
The customer for anyone selling PC components or accessories is whomever owns the PC. And if you dont have admin rights, you essentially don’t own the PC.

Would you let your teenage kid approve a mechanic you don’t know making changes to your car?

source
- Ziggurat@jlai.lu ⁨7⁩ ⁨hours⁩ ago
  Actually, this isn’t my question, I totally understand why I don’t have admin right but I am a wondering why tool manufacturer don’t have a way to run “stand-alone”. There is tools I need to my job, and other that I need to qualify/evaluate for my job…
  
  source
  - Blue_Morpho@lemmy.world ⁨7⁩ ⁨hours⁩ ago
    It’s new hardware. It needs to interact with Windows or Linux at a level that gives it hardware access. That requires admin (Windows) or Root (Linux) for software to be installed that has the ability to interact with new hardware that neither Windows nor Linux knows about.
    
    Software talks to the Operating System. The Operating System talks to drivers (small programs that understand the hardware). Drivers talk to hardware. Windows and Linux come bundled with hundreds of drivers. But they don’t come bundled with drivers for everything. That’s why you need to install the driver. If software could access hardware directly as a stand alone program, then anything you click on or run on the internet could also directly access hardware and install viruses, Trojans, spyware, etc.
    
    Software that could run stand alone and directly access hardware is how PC’s running DOS worked.
    
    source
foggy@lemmy.world ⁨9⁩ ⁨hours⁩ ago
Gross. Tell your IT director about solutions to this problem, like autoelevate. I mean there’s a security tradeoff but, you can have windows prompts for admins automatically prompt an IT admin to review and enter their credentials or deny and request more info. And it’s a very easy deployment for any intermediate IT person.

source
- entwine413@lemm.ee ⁨8⁩ ⁨hours⁩ ago
  No competent IT director would allow that.
  
  source
  - foggy@lemmy.world ⁨5⁩ ⁨hours⁩ ago
    Maybe google it before pretending you know what it does based on the name?
    
    www.autoelevate.com
    
    source
  - SupraMario@lemmy.world ⁨8⁩ ⁨hours⁩ ago
    No change control on admin privileges… that can’t be bad right lol
    
    source
- Ziggurat@jlai.lu ⁨4⁩ ⁨hours⁩ ago
  Actually, we do have now an approved way to get admin privileges through a dedicated application. However, on my experience if you run one installer it works, but if the installer calls for a second installer (let’s say one for the driver and a ne for the software). So I end up having to still bother IT.
  
  source
- RedditIsDeddit@lemmy.world ⁨8⁩ ⁨hours⁩ ago
  there’s software to do this appropriately like ThreatLocker for example but in most cases Auto elevation is a horrible idea from a security standpoint
  
  source
  - foggy@lemmy.world ⁨5⁩ ⁨hours⁩ ago
    Autoelevate does handle this appropriately.
    
    It automatically sends the prompt to an admin for review.
    
    It doesn’t automatically allow anything.
    
    source
    -> View More Comments