Hi All,

I am currently looking at improving and securing our IT service desk access to servers.

I tried to find what other companies currently give access to there service desk however I couldn't find anything.

General requests are resetting passwords, folder permissions, restarting print spoolers, creating new AD users / exchange mailboxes 

Currently the accounts have domain admin so they can do everything.

I would like to remove the following:

- Shutting down / restarting servers
- Installation of programmes

Does anyone know what else I could remove or what other companies have in place currently as a standard?

Thanks.