Especially in IT, the theoretical power is virtually unlimited. You manage both the authentication and audit layers. Realistically, most helpdesk employees can elevate themselves to complete domain admin and remain undetected for some period if they really wanted to.
-
Show this thread
-
Your personal confidence should be built on your personal integrity. You can be tempted, but in the end do not compromise. You could read email. You could browse servers. You could remotely copy personal files. You could ascertain almost anything. And you’d be destroying yourself
11 replies 51 retweets 243 likesShow this thread -
A personal allowance of elitism must not be anchored in the fact you can “do anything.” At some point you realize root is not a desirable or difficult-to-obtain power at all. Take pride in the fact others ruminate about abusing that access, and you do not. Would not. Ever.
12 replies 32 retweets 229 likesShow this thread -
The world thinks I read their email. My response is I could, but I don’t even give myself that permission by default because: 1.) I’m a professional 2.) Nobody should look at me when something bad happens 3.) I don’t even want to read my own email, fuck your mailbox Cindy
12 replies 108 retweets 546 likesShow this thread -
None of my accounts has domain admin. Sure, I can get in if I need to, but that’s like walking around with scissors.pic.twitter.com/CBBjNElRBZ
5 replies 10 retweets 127 likesShow this thread -
Year 1: I wish I had domain admin Year 10: Wtf keep that away from me
9 replies 64 retweets 359 likesShow this thread -
You only get to delete the HR OU by accident once
9 replies 18 retweets 185 likesShow this thread -
Also, fixing problems by giving accounts Domain Admin is a massive noob move. Domain Admins is just a group with some assigned permissions that Microsoft set up for you. It’s not actually special in any way. You can individually assign any real privileges needed yourself.
8 replies 14 retweets 109 likesShow this thread -
Unlike in video games, getting experience in IT doesn’t mean using an unlimited ammo pixel-accurate rocket launcher against every problem.
5 replies 17 retweets 99 likesShow this thread -
“If it solves problems why doesn’t every account just have Domain Admin.” And that’s how you end up with 700-user networks where everyone is a Domain Admin. Which is apparently NOT RARE.
14 replies 11 retweets 119 likesShow this thread
Not at all. *cries internally*
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.