Re: Multiple administrator
From: Iikka Meriläinen (Iikka.Merilainen@pato.vaala.fi)
Date: 11/28/02
- Next message: Help: "Re: Locked out of disk!"
- Previous message: Steven L Umbach: "Re: How do you secure a server running win2k-server?"
- In reply to: Philippe Aymer: "Multiple administrator"
- Next in thread: Alder: "Re: Multiple administrator"
- Reply: Alder: "Re: Multiple administrator"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Iikka Meriläinen" <Iikka.Merilainen@pato.vaala.fi> Date: Thu, 28 Nov 2002 22:26:04 +0200
Hi!
This is a difficult question to which no single correct answer exists.
However, I personally use my own account which is a member of Domain Admins,
and preserve the _real_ Administrator account along with any copies of it
for those situations my own profile screws up or something else strange
happens. This is also better when you don't want to share your admin
password to many people. In my organization there are about ten Domain
Admins members total of which only two (me and the director) know the real
admin password. Thus you have a better control of who _has_ administrative
privileges, either via the administrator password or via their own logins.
If it's practical in your case, you can also use your normal accounts
without any administrative privileges and use the 'runas' functionality when
you need elevated privileges for some single process. I've tried it, but it
didn't work as smoothly as I expected.
You could also have administrative privileges for your own accounts and then
use the real Administrator login as an emergency way out of problems. For
example, make a nine-character password and make sure each of those three
people know three different letters of the password. Then you can
cooperatively decide when the backup login is needed. This is for paranoids,
but many organizations have this policy.
-- Best regards, Iikka Meriläinen Vaala, Finland ================================================== Please reply to the newsgroup only so that others can learn from this issue. This message is provided "as is", with absolutely no warranties. ================================================== "Philippe Aymer" <aymerphilippe@hotmail.com> wrote in message news:47971ff0.0211281139.565d358f@posting.google.com... > Hi, > > we are 3 server admins in a Win2000 network. What is better: > > - to log in as "administrator" each time we need to be admin, > - to give our user account the "admin rights" > - other ? > > Thanks! > > -- > Philippe Aymer
- Next message: Help: "Re: Locked out of disk!"
- Previous message: Steven L Umbach: "Re: How do you secure a server running win2k-server?"
- In reply to: Philippe Aymer: "Multiple administrator"
- Next in thread: Alder: "Re: Multiple administrator"
- Reply: Alder: "Re: Multiple administrator"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
