Forum Discussion
Admin accounts which do not have the flag "This account is sensitive and cannot be delegated"
Hi AD Brain trust, I'm currently working on a security assessment for our internal AD environment. One of the item in the report is - Presence of Admin accounts which do not have the flag "This ...
Its a checkbox you can set on the AD user.
The general idea is not to allow other users to be able to use the permissions of your admin user.
There is a MS article that gives some more detail.
https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/how-to-configure-protected-accounts