Orchid XP v8 wrote:
> And *they* know the Enterprise Administrator password that trumps all 
> other passwords in the Active Directory forest.

Sure. Can you change that also?

Or, at least you'll know when someone changes stuff out from under you. 
  "Boss, I can't do my job, because the people at HQ keep changing the 
administrator passwords."

>  Not to mention that, as 
> my direct superiors, they have the power to order me to do things. [Such 
> as, say, HAND OVER THE PASSWORDS.]

Of course. But then you say "What do you need them for, for my auditing 
records?"

The point is not to prevent them from doing their work, but preventing 
them from doing work you don't know about.

-- 
   Darren New / San Diego, CA, USA (PST)
     "That's pretty. Where's that?"
          "It's the Age of Channelwood."
     "We should go there on vacation some time."

Post a reply to this message