I'm not sure why you'd want a local admin account on domain computers. I use restricted groups to control the who is a local administrator of these computers. Any non domain account is removed as an ...

OK, so like many places. IT staff is domain administrators. I know that is a bad idea and our recent outbreak of a undiscovered version of the conficker worm made that all too apparent. So I wish to ...

In my Tech Insight article in November, I discussed the issue of managing privileged accounts within an enterprise. One area I didn't really touch on was how to protect the local administrator ...

After reading my column, "Local Admin Password Problem," a couple of readers contacted me with their own solutions to automating password changes. These solutions are far too good for me to keep to ...