Re: Local Administrator Accounts

[Matthew Stublefield <mstublefield () MISSOURISTATE EDU>]

We disable them as a general rule, though some traveling laptops will
have a local account on it with admin. access. We have an Active
Directory group that has admin. access on our machines, and then we
add/remove people from that group on the AD. That way, if someone leaves
the university, we remove their access and they're no longer an
administrator on any machine. We get a new hire, we add them to the
group, and now they're an admin.

We do not have one group for the entire campus, though. Under our
decentralized model, each college has their own user support, so they do
things differently. But for our Centralized group (which supports all
staff on campus), we prefer the AD group method of administration.

---
Matthew Stublefield
Centralized User Support Specialist
Missouri State University

Phone: 417-836-4898
Email: mstublefield () missouristate edu