Running a Workstation Securely with Windows Standard Users

On workstations running Microsoft Windows, workstations should operate with a Microsoft Windows standard user for daily Simphony client operations, and a separate account used only for the Simphony installations and upgrades with only the minimum required administrative permissions to install software components and Simphony services.

Simphony Installation and Upgrade - Uses the operating system account with only the minimum required administrative permissions to install software components and Simphony services:

In order to successfully install or upgrade Simphony Workstations via CAL client, users need to change the Microsoft Windows user to an administrative Microsoft Windows user prior to any new installation or upgrade of Simphony client via CAL on any Microsoft Windows client devices. This account is a limited administrative account in scope, with only privileges to installing software components which require administrative permissions and registering services.

Daily Operations - Running the Simphony Ops Client using the standard limited operating system user:

After a successful installation and configuration of a service host (Ops), workstations can be run with a Microsoft Windows standard user. Using a standard user minimizes the risk of remote code execution and other exploits.

See the Oracle Simphony Client Deployment Guide for more information about installing CAL clients.