Running a Workstation Securely with Windows Standard Users

Workstations running Microsoft Windows should operate with a Microsoft Windows standard user for daily POS client operations and a separate account only for the Simphony installations and upgrades with only the minimum required administrative permissions to install software components and Simphony services.

Simphony installations and upgrades - uses the operating system account with only the minimum required administrative permissions to install software components and Simphony services:

To install or upgrade Simphony Workstations through the Client Application Loader (CAL) client, users need to first change the Microsoft Windows user to an administrative Microsoft Windows user. This account is a limited administrative account, with only privileges to install software components that require administrative permissions and registering services.

Running the POS client using the standard limited operating system user:

After a successful installation and configuration of the POS components, workstations can run with a Microsoft Windows standard user. A standard user account minimizes the risk of remote code execution and other exploits.

For more information on installing CAL clients, see the Oracle Simphony Client Deployment Guide.