Link to home
Start Free TrialLog in
Avatar of Simon336697
Simon336697Flag for Australia

asked on

A service account - should it be a member of domain admins or not?

Hi guys hope you are all well and can assist.

We are currently going through the process of reevaluating our Active Directory Security model.

What Id like some help with from you kind people is the following:

When you guys implement a new technology, and someone requests that a service account be created, what do you guys suggest in determining whether it should be:

1) a member of the domain admins group, or
2) just a member of the local admins group on each and every server?

Do you guys automatically add this service account to be a member of domain admins?
Or
If not, how do you add this new account to be a member of every local admins group on every server?

Any help greatly appreciated.
SOLUTION
Avatar of kpa2011
kpa2011
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Simon336697

ASKER

I agree with you Dave and all of you guys.