Yes. Define a unique account as your service account and use that for installing Exchange. Set the account password to something that's not obvious and configure it so that the password doesn't expire. Lock up the password to that account somewhere and don't ever use it for anything other than Exchange Services. Use separate accounts for backup or antivirus sw. Minimize the number of people that know the service account and make sure that the people who know what the password is do not use it for their daily tasks like mapping drives etc. Also make sure that the people who know the password have the same amount of power on the network with their own ids as does the service account (otherwise they'll use the service account to get around the network). Establish a plan and schedule for changing the password of the service account. Document all of the decisions you've made in a policy document and have it signed off by management. Follow and enforce your policy. S. -----Original Message----- From: Drewski [mailto:[EMAIL PROTECTED]] Sent: Friday, August 24, 2001 9:58 AM To: Exchange Discussions Subject: RE: Best Practices when installing Exchange 5.5 or 2000 You should log in to the server using the domain admin account, but when Exchange or SQL asks for an account to "run" with, it should be a seperate, distinct account. That way, you're not logging into the server with the Exchange Service Account ID, which is bad. Drew (MOS) ******************************** KWAR2001 website: www.schoolofdefence.org/kwar.html Read my Column on OUTLOOKEXCHANGE.COM: http://www.outlookexchange.com/articles/drewnicholson/default.asp Pics of Max are BACK! http://www.drewncapris.net ******************************** Take time to deliberate; but when the time for action arrives, stop thinking and go in. One man with courage makes a majority. - Andrew Jackson -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Thursday, August 23, 2001 10:02 PM To: Exchange Discussions Subject: Best Practices when installing Exchange 5.5 or 2000 What would you recomend as the best way to install an NT/2000 service , wheather it being exchange 5.5 services such as Information Store or Sql service .. For example my mail servers are running on NT 4 as memeber servers of an NT domain, when installing Exchange should I use the local Admin account, or the domains admin account, what are the pros and cons of both ??? Is it a security reason why you would use one or the other?? thanks _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
