[ActiveDir] Sarbannes Oxley compliance

[Creamer, Mark]

I’m curious what, if any, changes to everyday administration the folks on this list are making in preparation for Sarbannes Oxley compliance. Specifically, is anyone making a conscious effort to remove daily admin rights from people whose job it is to do domain administration, in favor of a “break the glass when needed” type of philosophy? I’m just starting to look into this, but I’m getting the feeling some companies are going overboard. Any observation from the group is always welcome…   Mark Creamer