Re: Controlling IT manager access?

I probably didn't state it right but professional competence and experience
*usually* goes a log ways toward developing that trust, along with checking
references.....etc.


hth
DDS

"S. Pidgorny <MVP>" <slavickp@xxxxxxxxx> wrote in message
news:OVU8rZLFJHA.3288@xxxxxxxxxxxxxxxxxxxxxxx
G'day:

Danny Sanders wrote:
If he is going to be the domain admin, anything you can do to restrict
him he as a domain admin can undo.

The most important thing to consider when hiring a domain admin is "Can I
trust Him/her".

Hire somebody you can trust.

Easier said than done. Usually you don't have much information about the
candidates. Selecting a candidate for their professional competence and
experience would be a better approach.


--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *


.

Relevant Pages

  • Re: C$ D$ ...
    ... I'm not sure I can trust the admin. ... >> If it's private then why not encrypt it? ... there are several ways a domain admin could attempt to gain ... If you think PGP is secure, ...
    (microsoft.public.win2000.security)
  • Re: Controlling IT manager access?
    ... him he as a domain admin can undo. ... trust Him/her". ... The benefits package we ...
    (microsoft.public.windows.server.security)
  • Re: Accountability of Domain Admins
    ... > I'm in a situation were there's more than one Domain Admin (including ... > me) and there are some trust issues coming up. ... use seperate admin accounts for each person (e.g. no one uses the generic ... Kazaa - Software update services for your Viruses and Spyware. ...
    (microsoft.public.windows.server.security)
  • Re: Trusts
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... > I use an application on the NT40 domain that needs Domain ... > call it ADMIN01) needs domain admin rights on the WIndows ... >>You can't only trust one user, ...
    (microsoft.public.win2000.active_directory)
  • Re: Trusts
    ... I use an application on the NT40 domain that needs Domain ... call it ADMIN01) needs domain admin rights on the WIndows ... >You can't only trust one user, ...
    (microsoft.public.win2000.active_directory)