Hacker News new | ask | show | jobs
by gargravarr 2534 days ago
Company-provided computers are generally bound by policies that restrict user powers (least-privileged access) and install updates soon after release. I don't know about you, but I often neglect system updates on my personal laptops. Whilst I'm also very careful with what I have on my personal laptops, I would still rather not connect them to the company network.

BYOD is popular but has some caveats - as the company grows, you wind up needing to secure ways company data can leak. It becomes necessary to plan for losses. Our computers are all encrypted and are not allowed offsite if they aren't. We also have remote-wipe capabilities, which is something a typical user isn't going to let the company install on their personal device.

We mostly allocate users laptops; a few have desktops, and most of those employees also have laptops to take home. We have allowed BYOD in the past but are now very firm on what we permit. Most users are happy to have company-supplied equipment, and I think the separation of work and personal is beneficial to most people. I like having work only on my work laptop. I only allow VPN access on a computer-by-computer basis. Admittedly we're a cloud company, so for most purposes all we need is an internet connection. The VPN gets used mostly by me to work from home, by employees who need their more powerful desktops or for me to do tech support remotely. It's not covered by an SLA but it works well for my purposes.

Sure, a lot of companies trot out the 'everyone does it this way' excuse, but there's actually a good reason for this - it works.

1 comments

Thanks for your helpful insight.

Since everyone agrees on this point I now absolutely consider that a fair argument. I just don't want to believe without a little research first. In fact I think I learned more than I expected from everyone's responses.

That's what we're here for, glad I could help!