Local Administrator Account or Domain Administrator Account?

[Guest mosquito_hippy]

I have this question:

 

Which is a better policy, to have local a administrative account with

different credentials in the domain PCs to perform administrative tasks or

use Domain Administrative Account to administrate all the domain pc's?

 

I think it's better to use local administrative accounts than compromise the

domain administrative account.

 

What do you think?

 

Thanks in advance

[Guest Shenan Stanley]

mosquito_hippy wrote:<span style="color:blue">

> I have this question:

>

> Which is a better policy, to have local a administrative account

> with different credentials in the domain PCs to perform

> administrative tasks or use Domain Administrative Account to

> administrate all the domain pc's?

>

> I think it's better to use local administrative accounts than

> compromise the domain administrative account.

>

> What do you think?</span>

 

What type of administration on the local pc are you doing?

 

Can these things be done with group policy?

 

WSUS?

 

System Center?

 

ADU&C?

 

You can have domain accounts that are members of the local computer's

administrators group and not part of the domain admins group.

 

--

Shenan Stanley

MS-MVP

--

How To Ask Questions The Smart Way

http://www.catb.org/~esr/faqs/smart-questions.html

[Guest Peter Foldes]

mosquito_hippy

 

Try here

 

 

On the web:

http://www.microsoft.com/communities/newsg...server.security

 

 

--

Peter

 

Please Reply to Newsgroup for the benefit of others

Requests for assistance by email can not and will not be acknowledged.

 

"mosquito_hippy" <mosquitohippy@discussions.microsoft.com> wrote in message

news:77E81AEC-EF89-41B1-9D9F-43AAF57D5124@microsoft.com...<span style="color:blue">

>I have this question:

>

> Which is a better policy, to have local a administrative account with

> different credentials in the domain PCs to perform administrative tasks or

> use Domain Administrative Account to administrate all the domain pc's?

>

> I think it's better to use local administrative accounts than compromise the

> domain administrative account.

>

> What do you think?

>

> Thanks in advance </span>