A system for identifying a security risk to one or more computing devices, comprising: one or more memory devices that store program logic ; and one or more processors operable to access the one or more memory devices and to execute the program logic , the program logic comprising: a security group analyzer that identifies a first set of users belonging to an administrator security group, each user in the administrator security group having a common set of privileges with respect to performing tasks on a computing device, wherein one of the privileges is access to an autostart extensibility point "ASEP" of the computing device, and wherein the ASEP is a mechanism by which a computer program can be caused to execute automatically after the computing device is powered on or booted up; a privileges analyzer that identifies a second set of users having access to the ASEP of the computing device; and a security risk identifier that identifies the security risk by at least identifying a third set of users that consists of the users that are in the second set of users but are not in the first set of users, the identifying the third set of users comprising comparing the first set of users to the second set of users; and a security risk handler that is configured to receive the third set of users and automatically revoke the privilege to access the ASEP of a user in the third set of users. one or more memory devices that store program logic ; and one or more processors operable to access the one or more memory devices and to execute the program logic , the program logic comprising: a security group analyzer that identifies a first set of users belonging to an administrator security group, each user in the administrator security group having a common set of privileges with respect to performing tasks on a computing device, wherein one of the privileges is access to an autostart extensibility point "ASEP" of the computing device, and wherein the ASEP is a mechanism by which a computer program can be caused to execute automatically after the computing device is powered on or booted up; a privileges analyzer that identifies a second set of users having access to the ASEP of the computing device; and a security risk identifier that identifies the security risk by at least identifying a third set of users that consists of the users that are in the second set of users but are not in the first set of users, the identifying the third set of users comprising comparing the first set of users to the second set of users; and a security risk handler that is configured to receive the third set of users and automatically revoke the privilege to access the ASEP of a user in the third set of users. a security group analyzer that identifies a first set of users belonging to an administrator security group, each user in the administrator security group having a common set of privileges with respect to performing tasks on a computing device, wherein one of the privileges is access to an autostart extensibility point "ASEP" of the computing device, and wherein the ASEP is a mechanism by which a computer program can be caused to execute automatically after the computing device is powered on or booted up; a privileges analyzer that identifies a second set of users having access to the ASEP of the computing device; and a security risk identifier that identifies the security risk by at least identifying a third set of users that consists of the users that are in the second set of users but are not in the first set of users, the identifying the third set of users comprising comparing the first set of users to the second set of users; and a security risk handler that is configured to receive the third set of users and automatically revoke the privilege to access the ASEP of a user in the third set of users. <EOS>