Re: Controlling IT manager access?

On Sep 12, 10:53 am, "Danny Sanders" <DSand...@xxxxxxxxxxxxxxx> wrote:
I probably didn't state it right but professional competence and experience
*usually* goes a log ways toward developing that trust, along with checking
references.....etc.

hth
DDS

"S. Pidgorny <MVP>" <slavi...@xxxxxxxxx> wrote in messagenews:OVU8rZLFJHA.3288@xxxxxxxxxxxxxxxxxxxxxxx

G'day:

Danny Sanders wrote:
If he is going to be the domain admin, anything you can do to restrict
him he as a domain admin can undo.

The most important thing to consider when hiring a domain admin is "Can I
trust Him/her".

Hire somebody you can trust.


I definitely have someone very trustworthy and qualified (probably
over qualified) but he is a relative who would be taking the position
as a way out of his current bad situation. The benefits package we
can afford to offer him would put him in the middle of the pack of
this company (11 employees) but his responsibilities would be
significant. I am very concerned about the animosity that might
develop if he becomes knowledgeable of the salaries and benefits of
others, including mine. Is it common practice for domain admins in
large enterprises to have access to information regarding benefits
packages of co-workers & corporate execs?
.

Relevant Pages

  • Re: Permissions for Administrators
    ... Anything you can do as a domain admin to lock down a domain admin, ... domain admins can undo. ... If you can't trust them the don't need to be domain admins. ...
    (microsoft.public.windows.server.active_directory)
  • Re: C$ D$ ...
    ... I'm not sure I can trust the admin. ... >> If it's private then why not encrypt it? ... there are several ways a domain admin could attempt to gain ... If you think PGP is secure, ...
    (microsoft.public.win2000.security)
  • Re: Controlling IT manager access?
    ... The benefits package we ... But let me ask you this: do the other ten or so employees know ... I am and always have been the only domain admin. ... The issue for me now is the hiring of someone ...
    (microsoft.public.windows.server.security)
  • Re: Controlling IT manager access?
    ... You might consider keeping the domain admin role and hiring a Jr. ... The benefits package we ... But let me ask you this: do the other ten or so employees know everyone's ...
    (microsoft.public.windows.server.security)
  • Re: Controlling IT manager access?
    ... The benefits package we ... My guess is that it is not common practice for domain admins to have access ... level of trust. ... But let me ask you this: do the other ten or so employees know everyone's ...
    (microsoft.public.windows.server.security)