All users should have the privileges necessary for doing their jobs—and no more. Viruses spread readily in an environment in which users have more access than is necessary. It may seem convenient to give some staff local administrative rights on their computers, but those rights can put the entire organization at risk.