4 ms·
What corporate network uses local accounts as opposed to Active Directory/Domain accounts? If your business is not managing accounts over the domain via Active
by criley2 11y ago
What corporate network uses local accounts as opposed to Active Directory/Domain accounts?
If your business is not managing accounts over the domain via Active Directory and is individually setting up unmanaged local accounts for employees, you have far far bigger security issues than this remote desktop exploit.
- peterwwillis 11y agoAny internal corporate network where a lot of R&D is done. AD accounts are typically for users and generic accounts, but if you're just spinning up a VM to test something, or you rebuild hosts regularly, local accounts speed up workflows. And a lot of people don't have solid security practices in place.
- arca_vorago 11y agoI've been crucified in irc for suggesting moving away from samba and towards using chef/puppet/ansible/salt to manage windows user accounts (if coupled with pxe booting for dynamic image loading on user machines...) I still like the idea. OpenLDAP, etc also aren't cutting it to me... but don't confuse me misunderstanding the current importance of AD lock-in and the man/mind-hours needed to transition away from it.
- l0c0b0x 11y agoSounds like it only takes one local account, and there's got to be a local admin account in order to add the machine to a domain.
- yuhong 11y agoYes, it has to be a local admin account or it would have to be manually added to the group.