Rao, I think you are drawing the wrong conclusion. It's not that we have more people administering Windows servers in our organization, rather the architecture of Windows requires more people NOT in the admin team to have admin access in order to perform their jobs. On our Unix servers the application development and support teams generally do not have root but on windows boxes they typically must be local admin.
Now if you classify anyone with local admin rights as being an administrator then yes, there are more of them on our Windows servers. But we don't think of it in those terms. We follow a separation-of-duties model where admins, developers and support personnel are supposed to be kept out of each other's domains such that no one person has the ability to modify, install and run Production code. In this model having to give local admin to anyone not in the admin team (such as a developer) is seen as a security risk because it is next to impossible to enforce a separation of duties. So when we are looking to host an application that will move cash around we try real hard to keep it off of Windows servers. And yes you are right that I'm not in Bill's camp although I have yet to put my money where my mouth is - I run a Windows 2000 domain at home. -- T.Rob -----Original Message----- From: Adiraju, Rao [mailto:[EMAIL PROTECTED] Sent: Monday, March 15, 2004 8:25 PM To: [EMAIL PROTECTED] Subject: Re: Locking down MQ files/registry on Windows Hi Rob I can see from your mail that you are not from Bill's camp (Microsoft). You your self admitting that there are more people supporting Windows servers than Unix servers in your organisation - which means either managing the windows are more complex than managing Unix boxes (don't get stressed on this statement) or Bill is quite good at creating more jobs (as an IT person I LOVE the idea). Instructions for managing your mailing list subscription are provided in the Listserv General Users Guide available at http://www.lsoft.com Archive: http://vm.akh-wien.ac.at/MQSeries.archive
