dynamik wrote: Off the top of my head, security templates, IPSec, MSBA, group policy settings, kerberos, security-related command-line utilities, WSUS, etc. Principle of least privilege is just what it sounds like. Don't give someone more privileges than are necessary for the tasks they're doing. If you need someone to manage user accounts, reset passwords, etc., don't make them an administrator, just use delegation to give them the privileges they need to do their job.
Technowiz wrote: Nice job! A pass is a pass! I'm taking mine in the morning.