3 ms·
This is simply incorrect. It's quite possible to audit what system admins do by logging changes to a system and auditing the logs. I've personally ran an audit
by stephengillie 13y ago
This is simply incorrect. It's quite possible to audit what system admins do by logging changes to a system and auditing the logs. I've personally ran an audit of logs in a worldwide cloud email service (you have heard of them) to find out which of my fellow admins made changes to a senior admin's access.
And you can definitely control what access system admins have to your system. Not every person who joins workstations to a domain needs to have full domain permissions.
This kind of sloppy authorization and system state control is inexcusable.
- staunch 13y agoYou only think this because you haven't had your system tested in a real way. Hire a really good security firm and I assure you they will easily circumvent your auditing with no more access than your most trusted sysadmin.
- stephengillie 13y agoI'm pretty sure Microsoft did.
- staunch 13y agoI wouldn't bet on it. Most security audits are designed to tell clients (and their clients) what they want to hear.