Skip to main content
C
crystals5652475
Participant
November 28, 2018
Answered

Creative Cloud Security Question

  • November 28, 2018
  • 2 replies
  • 756 views

I work for a company that uses Creative Cloud for our office of about 20-25 Creative employees. Its Amazing! I love it! Just wish our IT department would keep us on current versions. Recently we found out that we could use our adobe account to install it on a second computer at home.(if we wanted). But our IT department keeps our log ins and passwords hidden from us so that we do not have access to our accounts (I guess they use premade emails to link the accounts). They will log us in at work, if we ask, but we have to do it every day. I have tried getting an answer from them about why they are doing this. Is there some unknown security risk for our IT department to keep our Company log ins secret and keeps us from being able to use the software on a 2nd computer at home. We each have our own personal computer desk/office at work that no one else uses, so the keys are not in use if we are not at work.

Thanks for any info and help!

This topic has been closed for replies.
Correct answer Dave Merchant

crystals5652475  wrote

But it doesn't answer my question.

Is there some unknown security risk reason for our IT department to keep our company log ins secret. Its a sincere questions we would like to know. If it does depend on how the network/servers are set up then that would be a great answer. But we do not know.

Presumably they don't want you adding files to your CC storage space, then going home and downloading them.

Data theft via cloud storage is a huge problem as there's no way for a corporate IT department to detect it or to analyze the incident after the fact - they can't see the server logs and can't limit access to approved IP ranges. Since Creative Cloud doesn't allow you to disable the storage features (unless you sign up for the special Government edition) then their only option is to stop you from being able to log in at all. It's not an unusual situation.

2 replies

D
Dave Merchant
Legend
November 28, 2018

Disabling USB ports and scanning email attachments is very simple for corporate IT. The stuff being transferred to Adobe's servers is encrypted and so it's impossible to inspect or filter - saving a swatch color or a classified memo looks exactly the same to the firewall. Since there is no on-premises version if anyone in your team uses CC Libraries, mobile sync, etc. then access to Adobe's servers has to be left wide open. There is also a major concern in some sectors about the legality of Adobe's cloud storage, since anything you upload goes to US servers owned by a US corporation, and so can be copied by Uncle Sam. Unlike with the big cloud vendors you cannot demand your data is stored in a local jurisdiction.

As to transferring viruses; whatever is in your CC storage is copied onto the hard drive of every machine you log in from, so it's certainly a route to move malicious files in and out of an otherwise-secure network; but there is a limit to what Adobe will allow you to upload.

    C
    crystals5652475Author
    Participant
    November 28, 2018

    Thanks so much for your informative reply!   It really helps me understand their decision.

    Thanks again!

    Crystal

    John T Smith
    Community Expert
    John T SmithCommunity Expert
    Community Expert
    November 28, 2018

    The owner of the subscription makes the rules, not Adobe

    Since your company owns the subscriptions, your company makes the rules

    C
    crystals5652475Author
    Participant
    November 28, 2018

    But it doesn't answer my question.

    Is there some unknown security risk reason for our IT department to keep our company log ins secret. Its a sincere questions we would like to know. If it does depend on how the network/servers are set up then that would be a great answer. But we do not know.

    D
    Dave MerchantCorrect answer
    Legend
    November 28, 2018

    crystals5652475  wrote

    But it doesn't answer my question.

    Is there some unknown security risk reason for our IT department to keep our company log ins secret. Its a sincere questions we would like to know. If it does depend on how the network/servers are set up then that would be a great answer. But we do not know.

    Presumably they don't want you adding files to your CC storage space, then going home and downloading them.

    Data theft via cloud storage is a huge problem as there's no way for a corporate IT department to detect it or to analyze the incident after the fact - they can't see the server logs and can't limit access to approved IP ranges. Since Creative Cloud doesn't allow you to disable the storage features (unless you sign up for the special Government edition) then their only option is to stop you from being able to log in at all. It's not an unusual situation.

      Terms & ConditionsAccessibility statement
      Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices