As mentioned in a post earlier this week, Security & IT Expert Russell Smith joined us for a live webinar — Best Practices for Managing Domain Admin Accounts. The webinar is now available on demand, here's a quick except:

It's not uncommon that IT staff are permanently assigned domain administrator privileges to expedite access not only to domain controllers (DCs), but also local administrator permissions on domain member servers and user workstations.

In this session, Russell Smith looks at the risks of assigning domain administrator privileges to IT staff, how to assign local administrator privileges safely, and successfully managing access to DCs. After this session you will:
  • Better understand the risks associated with using domain administrator accounts on devices that are not DCs
  • Learn how to assign local administrator privileges to IT staff without adding them to the Domain Admins group in Active Directory
  • Methods and best practices for granting access to domain controllers