[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 145
  • Last Modified:

Ok to list my network guy as the account admin

Is it OK to let my network guy list himself as the domain admin for my site as long as I am listed as the owner ?

As long as I am listed as the owner I should be able to get the site back no matter what the dispute ?

Thanks
0
sidwelle
Asked:
sidwelle
  • 3
  • 2
  • 2
  • +2
4 Solutions
 
comfortjeaniusCommented:
You could make an account and disable it the account when he is finish.
0
 
stu29Commented:
If you are running on a Windows server, then adding your network guy with full admin rights will mean that he would be able to adjust the permissions at the file level to take ownership and remove your access.  As long as someone has FULL Access rights then they would be able to remove your rights.
0
 
KimputerCommented:
@sidwelle: You are totally correct.
0
When ransomware hits your clients, what do you do?

MSPs: Endpoint security isn’t enough to prevent ransomware.
As the impact and severity of crypto ransomware attacks has grown, Webroot fought back, not just by building a next-gen endpoint solution capable of preventing ransomware attacks but also by being a thought leader.

 
stu29Commented:
@Kimputer .... if he gives he assigns full access to anyone over the full site and directories then they would be able to take ownership away and therefor would be able to remove the original owner and their permissions (my understanding).  Any time someone has full access then they can adjust permissions?

I could have misinterpreted the question ... I have done it before ;--
0
 
sidwelleAuthor Commented:
Its a domain, not a server.  the network guy takes care of some local PCs and LAN, but he won't be administrating the web server. He is just a consultant for the project.
0
 
TropicalBoundCommented:
stu29 is absolutely correct.  As a domain admin, he has full access to the domain.  He will be able to create accounts that will gain him access after his project is complete.  Watch AD closely for new accounts and/or changed passwords on existing accounts.
0
 
KimputerCommented:
@sidwelle: Again, you are totally correct. He's can easily be domain admin (and handle all the technical stuff if any problem arises, be it DNS, spam, hosting or whatever), and you can still replace him anytime you want (don't even have to have him hand over passwords, they can be reset and sent to you by to the domain provider, after you change to another domain admin)
0
 
stu29Commented:
@sidwelle ... I have a feeling that Kimputer, TB and myself are all correct based on our understanding.  So to quantify

@Kimputer is correct if you are talking about online hosting Domain access, nothing to do with your network or servers etc.

@TB is correct (apart from the fact that he agreed with me .. smile) because if this is part of your internal Domain .. then any Domain Admin access granted will null and void any protection you have as you will be able to removed from the Access Control List.
0
 
sidwelleAuthor Commented:
Kimputer's answer was exactly what I was looking for. "online hosting Domain access"

This is what I thought, just wanted some reassurance.

Thanks.
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 3
  • 2
  • 2
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now