logon user problems

  • Thread starter Thread starter Eco
  • Start date Start date
E

Eco

For normal server running in production, I would like to ask the following
questions that which one you will recommend.

1. Logon server as administrator or other name with administrator rights?

2. If the server is a member server, logon the domain network or local
computer?
 
Hi,

Use account that has enough permissions to do the job, but when possible is
not a member of administrator group (I guess that would be ideal). There are
lot of scenarios where this won't work (e.g. administering IIS -- you will
need to be local admin).
I would recommend you to use account that is only member of local
administrator group and is not built-in administrator or member of domain
administrator group.
Each user administering the server should have its own account. In case that
someone does something bad, you should have a pretty good idea who, or at
least with which account.
If you really want to get secure then logon to the server with an account
that is ordinary user (not member of local administrator group on the server
and then use "runas" to run an application as administrator.

If server is member of domain then logon to domain. That is the point of
single account management ;-).
 
Back
Top