Bad to be logged in as admin all the time?

Posted by poke on Server Fault See other posts from Server Fault or by poke
Published on 2011-01-20T01:44:23Z Indexed on 2012/09/25 3:40 UTC
Read the original article Hit count: 511

Filed under:
|
|

At the office where I work, three of the other members of the IT staff are logged into their computers all the time with accounts that are members of the domain administrators group.

I have serious concerns about being logged in with admin rights (either local or for the domain). As such, for everyday computer use, I use an account that just has regular user privelages. I also have an different account that is part of the domain admins group. I use this account when I need to do something that requires elevated privilages on my computer, one of the servers, or on another user's computer.

What is the best practice here? Should network admins be logged in with rights to the entire network all the time (or even their local computer for that matter)?

© Server Fault or respective owner

Related posts about Windows

Related posts about security