Robert
Sun Oct 19 05:29:07 CDT 2003
Marlon Brown wrote:
> I work as a sysadmin for a 2,000 node organization. I created
> documentation where I list changes on AD structure (such as
> delegation of rights, schema modifications, domain admin usernames)
> and I am wondering how bad would be keep that word file on a folder
> where only domain admins could access it. I would never keep a file
> with passwords on a networked server and I would like to confirm how
> you approach that type of structure information file on the 'network'
> ?
I wouldn't keep a list of domain admin passwords on the network at all. I'd
print it off and put it in a sealed envelope in a safe thats operated by
someone you trust and which you can get access to, if you must have them
written down like that. If I didn't have a suitable safe (e.g. a
departmental tape safe would do) I'd buy one.
As for the document itself, without the passwords, I would keep it in a
secure folder on a server without too much problems. If you are that worried
you could also save it to a CD/RW or even a USB drive and then place it in
another sealed envelope in that safe I just talked about.
--
--
Rob Moir
Microsoft MVP for servers & security
http://www.robertmoir.co.uk