Aaron アーロン (@acapaaron)

This might be a controversial take, but I'm not a fan of #sudo. The idea is you can give people access to the "sudoers" or comparable group, and then you don't have to share the #administrator password. The sudoer can use sudo to run what they need with escalated or admin privileges using their own password. The problem I have with it is that very few people should need to escalate to administrator themselves to begin with. A good IT #security policy basically means most if not all users have the required privleges to accomplish their jobs (no more, no less). What's going to happen in most organizations using sudo is they will either have a weak policy or no policy at all. Too many will have sudo privleges if not everyone, and it will serve as a vector to infiltrate windows from outside attackers taking over just one sudoers account. I don't use Windows 11 yet so this doesn't impact me, but it should be something organizations who have never been exposed to sudo should be mindful of. I have years of experience with it now, and my policy when I run IT is to ditch it for just plain su and tightly controlled user accounts. https://devblogs.microsoft.com/commandline/introducing-sudo-for-windows/