At Oxford, widely different attitudes:

1. It is difficult to deny root access to the owner of the machine as they bought the machine.
2. A small number of people in each research group have root access to the machines in that group.
3. Only the sysadmin has root password because
   he/she takes the responsibility that the machines are
   secure and up-to-date.