AD Security Tip #1 Instead of making your IT staff domain admins, make them server operators so they can make themselves domain admins.
AD Security Tip #1 Instead of making your IT staff domain admins, make them server operators so they can make themselves domain admins.