Thank you for this info and the info about DA accounts. This is very helpful!
On Sun, Jan 1, 2017 at 9:54 PM, Kurt Buff <[email protected]> wrote: > We have a nominal staff of 3.5 sysadmins, serving ~250 staff across > offices in 3 different countries. I say nominal because we're running > one short at the moment. One of us is user/desktop-focused, I'm a > generalist, there's the IT director, who is also a generalist. The .5 > position we're looking to fill will be more network-focused, and will > also work with our engineering staff. > > Each of us has a normal non-privileged account, a workstation > administration account, a server administration account and three of > us have a DA account - the desktop guy doesn't have a DA account, yet. > He's leaning quickly, though. > > Erik and Jon have it correct. Never share accounts, only assign > privileges as needed. > > Kurt > > > > > > On Sun, Jan 1, 2017 at 12:01 PM, CSSU NetAdmin <[email protected]> > wrote: > > We are looking at re-organizing our IT department for our K-12 school > > district. Are there examples out there for how work is divided? Do IT > > staff focus on specific areas or is everyone more of a generalist? We > have > > moved to Chromebooks in a big way and find how we are presently > organized- > > school based- really doesn't work anymore. Finally, who uses the Least > > Privilege Administrative model? If you do, is there one domain admin > > account shared for people who need admin rights or do each IT staff > person > > have two accounts? > > > > Thanks for any ideas. Happy New Year! > > >

