Administration Best Practice

[Peter D]

We are moving from an SBS 2000 configuration to a Windows
2003 multiple server environment.
With SBS everything was on one box and many things
required the use of the true "Administrator" account.
With the new servers I want to implement better account
procedures including restricting use of the true
Administrator account. I plan to rename the account and
assign it a strong password.
I want to create additional accounts for installing
applications, backups and daily administrative tasks.
What permissions to I need to give these accounts and
what groups should I assign them to? How many accounts
would I really need? I am the only network administrator
and my boss is the only other person who needs to access
the network administratively.
Where can I get some advice/checklists on best practices
for account creation and usage?

Thanks.

Peter Diamond

 

[Marina Roos]

Hi Peter,

You know that you can have member servers and DC in SBS, right? SBS 2003
will support up till 75 connections now.

 

[Nex6]

Check the built in groups, most of them are setup just for these kinds
of things.

and check the Microsoft website for 'webcasts' there are alot of good
ones and some may really help you out.




-Nex6

 

[Diana Smith [MSFT]]

Hello,

This paper contains all the information that you need to delegate tasks to
users:

Best Practices for Delegating Active Directory Administration -- Managing a
distributed Active Directory environment requires dividing administrative
responsibility among trusted data and service administrators and
implementing administrative roles and access control to support secure and
efficient delegation of administration.
http://www.microsoft.com/downloads/...a3-79e1-48fa-9730-dae7c0a1d6d3&displaylang=en

Thank You.

Diana

This posting is provided "AS IS" with no warranties, and confers no rights.