Quote:
Originally Posted by hdawg
You remove your user account from the Domain Admins group, create a regular user account that you use for all of your non-administrative functions (including your blackberry) and use a domain admin account for when you need to be an administrator.
Principle of least privilege
Live it, love it, learn it! |
You said it. The account you use everyday as a normal user should never be a member of the domain admins or any other active directory administrative group.