Re: local/domain user

thanks for the info.

what when there's no local account present (only domain accounts) and your
domain passxord expires when working offline when not connected?

Guy


"Bruce Chambers" wrote:

Guy wrote:
- Are there any best practices as how to name the local account?

Actually, if the computer is part of a domain, you really don't want
any local accounts at all, beyond those built into the OS.


- When creating a local user I suppose its not the purpose to make this user a
member of the Administrators group?

Not unless you want massive security and other problems, no. In fact,
you don't want any local accounts , at all.

- In a company I used to work for I saw they renamed the local
Administrator user into localadmin, is this also good practice?


The standard security practice is to rename the account, set a strong
password on it, and use it only to create another account for regular
use, reserving the built-in Administrator account as a "back door" in
case something corrupts your regular account(s).


Or isn't it
necessary to rename the local Administrator user, of course when using strong
passwords?


Belts and suspenders.


- when creating a local user, should this user also have access to POP3 email
or exchange via Outlook, or should only the domain user have this email
access?



Again - and I cannot empasize this enough - if the computer is part of
a domain, there is no good reason to create any local accounts on it.



--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

.