While I agree a DA at large should be expected to be proficient t SCCM, etc, I would expect a DA to be proficient on AD knowledge.
When I started even the Service Desk folks were DA's because the SE's didn't know how to grant admin access to users' PC's or be able to create AD accounts without DA permissions. I did manage to fix THAT, but it's a lot harder to convince these SE's to even create a separate DA account and use a normal user account for their daily activities much less remove any of them as a DA altogether. -----Original Message----- From: Steve Kradel [mailto:[email protected]] Sent: Friday, October 14, 2011 11:16 AM To: NT System Admin Issues Subject: Re: How you know some SE's aren't really in the Windows management space Just to add a different perspective, not every organization lumps directory services and patch management or A/V together. I wouldn't consider it essential for a DA at a large company to know about SCCM, nor a DBA to know everything there is to know about storage management... we're talking major division of labor here. --Steve On Fri, Oct 14, 2011 at 1:59 PM, David Lum <[email protected]> wrote: > All of them make more than me (kind of irrelevant) all are Sr SE's > (I'm not > Sr) and they are in control of our AD design and - in theory - maintenance. > By default when they (or someone comes to them) have an AD question > they come to me as they understand "Active Directory, Dave's our AD guy...". > > > > IMO if someone knows less about AD than I do, they shouldn't be a DA > (not that I'm awesome, I just feel I should be the lowest common > denominator for allowing DA access). > > > > From: Jonathan Link [mailto:[email protected]] > Sent: Friday, October 14, 2011 10:42 AM > > To: NT System Admin Issues > Subject: Re: How you know some SE's aren't really in the Windows > management space > > > > Oy. > > > > How much do they make, and where are their jobs? > > On Fri, Oct 14, 2011 at 1:27 PM, David Lum <[email protected]> wrote: > > I'm used to it now. I've got similar responses when I've suggested > things like Access Based Enumeration (they'd never heard of it) or > mentioned that we can use GPO to allow local admin access to specific > servers instead of making people Domain Admins ("you can do that?"). > > > > From: Jonathan Link [mailto:[email protected]] > Sent: Friday, October 14, 2011 10:15 AM > > To: NT System Admin Issues > Subject: Re: How you know some SE's aren't really in the Windows > management space > > > > Did you *facepalm*? > > On Friday, October 14, 2011, David Lum <[email protected]> wrote: >> "What's Shavlik? Never heard if it..." >> >> >> >> And these folks are Domain Admins... >> >> David Lum >> Systems Engineer // NWEATM >> Office 503.548.5229 // Cell (voice/text) 503.267.9764 >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
