Should I NOT delegate anything to their standard day-to-day user accounts, and create accounts specifically for these tasks? side note; the 2 users in question are educated enough to know NOT to do anything other than these basic tasks e.g. they wont pop open ADSIEDIT ,sites & services, or any other AD tools and start experimenting
> Date: Tue, 9 Dec 2014 18:40:32 -0800 > Subject: Re: delegate vs dedicated -was [NTSysADM] Fwd: FW: Heads Up! New > Hybrid Ransomware Replicates Like A Virus > From: [email protected] > To: [email protected] > > On Tue, Dec 9, 2014 at 4:52 PM, J- P <[email protected]> wrote: > <snip> > > Is it better to; > > A) create specific accounts for these functions > > or > > B) delegate ? > > > > The only AD functions they do are , create user/exchange accounts, password > > resets, account unlocking, the occasional kicking out of a hung Citrix/2X/TS > > session, and maybe a reboot of server here and there. > > Define better... > > Kurt > >
