I've been continuing my efforts to get my company's user accounts under control. We have a lot of Windows service accounts that are used by software, and many of these were put into the Domain Admins group without any real thought regarding what rights they legitimately need. Now that my eyes have been opened to this situation, I've been working with our system administrators to find a way to let software run without such a high level of access.
Stories by J F Rice
I've just taken part in an all-day budgetary bloodbath. Not unexpectedly, my capital budget for 2009 is basically zero.