The Keys to the Kingdom: Limiting Active Directory Administrators

Allowing data center server operators to be Active Directory domain administrators is a common practice - and a potentially damaging security risk. The challenge is balancing directory security with effective daily operations. So how do you delegate needed rights to domain controller administrators without compromising the domain’s security? This white paper outlines the security risks, and presents a process for separating the role of domain controller administration from domain administration using native tools.