I was asked this morning why we should not give Domain Admin access to a particular user that wishes to install/manage/own a server in his department.
Realizing that the question should not be answered with the use of a pugil stick and a horizontal butt stroke, I placed the pugil stick back in the closet.
My best answer is to define what Domain Admin access means. Knowing that I don’t have all of the answers, I would like to hear your thoughts on this matter.
In defense of the ‘higherup’ that asked the question, he does understand the ramifications of such a change. However, he is looking to me for the facts.
Thank you in advance,
-Joe