I am currently looking at improving and securing our IT service desk access to servers.
I tried to find what other companies currently give access to there service desk however I couldn't find anything.
General requests are resetting passwords, folder permissions, restarting print spoolers, creating new AD users / exchange mailboxes
Currently the accounts have domain admin so they can do everything.
I would like to remove the following:
- Shutting down / restarting servers
- Installation of programmes
Does anyone know what else I could remove or what other companies have in place currently as a standard?