IMO - Individual accounts is the only way to go; this will make your life a whole lot easier when it comes to finding out who performed what and when (depending on what your audit settings). You're just inviting trouble by using one centralized account!! :)
Thanks... ... ... ... Sergio J. Olivarez - Contractor GD-NS -----Original Message----- From: AdamT [mailto:[EMAIL PROTECTED] Sent: Friday, March 10, 2006 7:19 AM To: [email protected] Subject: [ActiveDir] Individual admin accounts vs Generic admin account. Dear collective, In your esteemed opinions, is it better to have one central admin account which every member of the sysadmin team should use, or is it better to give ever member of the team their own admin account? I'm inclined towards giving people their own admin accounts, purely from an audit point of view, but I'm being told that it's better to have one central admin account, as it is easier to track which accounts have admin rights. I would have thought that NET GROUP would make that fairly obvious. Am I missing something here? -- AdamT 'Thank-you for not requesting read receipts' List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
