Multiple Active Directory User Accounts per User

15 pts.
Tags:
Active Directory
Active Directory Administration
Active Directory Users
Is there anything wrong with having multiple active directory accounts for one user? For example, one account with restricted rights and a second account with administrative rights.
ASKED: September 16, 2010  5:34 PM
UPDATED: September 17, 2010  12:22 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

That is best practice. All users should use lowest authority possible when performing actions. This will greatly reduce the ability of malware to do damage if the session is running under lower authority credentials than administrator. I highly recommend, use and support this method. This is also known as the Principle of Least Privilege.

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • Nsdp51
    So if user Bob needs administrative privilege periodically, you would recommend two AD accounts for Bob...one account with reduced privilege that he would use most of the time and another account, say Bob-A, that he would have to login under when he needed the administrative privilege?
    15 pointsBadges:
    report
  • Labnuke99
    Exactly - I have three accounts that I use - one regular user, one local administrator for systems and one domain administrator account.
    32,960 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following