Working on servers

[said07]

I have in my it team about 4 guys. Each one of them seems to want to log onto the servers (Sql, dc, print servers...) with his own domain account to do what he needs to do when they don't log on as domain admin.
Is there a drawback to that or should we all have a generic user?

Thanks,

 

[Titleist]

Create separate accounts for each user so you can audit any activity they do. If you use one generic account you will never know who did what..

John

 

[said07]

Thanks.

 

[58sniper]

IT pros should use elevated accounts when necessary, and ONLY then. "Normal" tasks should be performed using non-elevated accounts.

Remember - viruses can attack things they have rights to. Always use separate accounts for administration.

Do you have your Tek-Tips.com Swag? I've got mine!

Stop by the new Tek-Tips group at LinkedIn.