Local Administrator Account or Domain Administrator Account?

Discussion in 'Windows Server' started by mosquito_hippy, Mar 25, 2009.

  1. I have this question:

    Which is a better policy, to have local a administrative account with
    different credentials in the domain PCs to perform administrative tasks or
    use Domain Administrative Account to administrate all the domain pc's?

    I think it's better to use local administrative accounts than compromise the
    domain administrative account.

    What do you think?

    Thanks in advance
     
    mosquito_hippy, Mar 25, 2009
    #1
    1. Advertisements

  2. Hello mosquito_hippy,

    The Domain administrator account configure with a strong long password and
    do not use it, think about disabling. BEFORE that, ofcourse create your own
    account's that are members of enterprise/domain admin group.

    If you did the work yourself on the client it doesn't matter which account
    you use.

    Best regards

    Meinolf Weber
     
    Meinolf Weber [MVP-DS], Mar 25, 2009
    #2
    1. Advertisements

  3. mosquito_hippy

    Marcin Guest

    Actually, you should consider creating a designated group containing
    non-Admin domain user accounts and add it to local Administrators group on
    target computers (this can be easily accomplished using Restricted Groups
    group policy setting). Keep in mind that you still might need local Admin
    account in situations where a computer loses a connection to the domain...

    hth
    Marcin
     
    Marcin, Mar 25, 2009
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.