Information Security Handbook

Limit administrator accounts

Not everyone in your organization has administrator privileges on your information systems. The creation and assignment of administrative rights to your organization's team members should be carefully considered and given to only the people that need to have the permissions. When creating these accounts, bear in mind the following guidelines:

• Accounts with global impact, such as enterprise admins and domain admins, should be given to very few individuals:
  • Well-intentioned administrators can make serious, inadvertent misconfigurations on your enterprise network
  • Malicious administrators will essentially have full control over your network and can make changes and access information as they see fit
  • Provide the ...