Controlling access to servers

sf_mail_sbm_at_yahoo.com
Date: 11/30/04

  • Next message: Emil Bey: "Re: Information on Bandwidth Issues" 
    Date: 30 Nov 2004 12:10:06 -0000
To: security-basics@securityfocus.com
    ('binary' encoding is not supported, stored as-is)

    Hi List,

    Consider a situation where IT Dept has full access and control over all servers

    How do we manage security in such a case? i.e. how can we put control measures to prevent IT Admins to do whatever they want on the system without going through a proper control & approval process

    One solution might be to give the admin passwords to the IT Security Section or the IT Audit, in this way, Admins will have to request them to log in the machine for all interventions

    Of course this solution has lots of drawbacks!

    I would be glad to know how other companies manage to control changes being done on IT systems, particularly in large organisations

    Thanks for your comments

    Ronish

  • Next message: Emil Bey: "Re: Information on Bandwidth Issues"

    Relevant Pages

    • Re: OU vs Domain
      ... > resistance from admins from NT resource domains during an upgrade to AD. ... > If you are the admin of your own OU you will be given complete control over ... > the new importance of DNS in AD. ... >> replicate data to other servers around our network, and this is one of the ...
      (microsoft.public.win2000.active_directory)
    • Re: OU vs Domain
      ... resistance from admins from NT resource domains during an upgrade to AD. ... If you are the admin of your own OU you will be given complete control over ... You will also lose full control of DNS, but this is not a bad thing given ... > replicate data to other servers around our network, and this is one of the ...
      (microsoft.public.win2000.active_directory)
    • Re: Branch Office DC Best Practice
      ... we are not talking about make the office admins "Administrators" of the DCs, ... Systems Administrator ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... Delegation of control. ...
      (microsoft.public.windows.server.active_directory)
    • RE: Controlling access to servers
      ... machines because the information they contain is "too sensitive". ... > How do we manage security in such a case? ... > control measures to prevent IT Admins to do whatever they ... > Security Section or the IT Audit, in this way, Admins will ...
      (Security-Basics)
    • Re: Branch Office DC Best Practice
      ... (Link Doman controllers Policy to that OU) ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... Delegation of control. ... Domain Admins, the local tech group and Administrator and link to the ...
      (microsoft.public.windows.server.active_directory)