Forum Discussion

Samer Rustom's avatar
Samer Rustom
Copper Contributor
Jun 29, 2023

Create a separate account to install software

I am using the server administrator account whenever I need to install a software on joined domain computer. Is this the best practice or I have to create a separate account for security? I appreci...
Active Directory
Group Policy
Windows Server
MathieuVandenHautte's avatar
MathieuVandenHautte
Iron Contributor
Jun 29, 2023

Hi Samer,

The best practices are:
- Never use the enterprise or domain admin accounts
- If possible, use solution such as pdq deploy, intune or SCCM to deploy software

I would also like to add: use the "Local Administrator Password Solution" (LAPS) for management of local account passwords of domain joined computers.

  • Samer Rustom's avatar
    Samer Rustom
    Copper Contributor
    Jun 29, 2023

    MathieuVandenHautte thank you for your swift response

    I am wondering if any of those option are for fee with azure educational license please 

Resources