Asking my bosses for domain admin rights?

Question

I have been given the role of IT technician at my company. However the role is more of a Network Administrator but they do not allow me to have domain admin rights. I have to ask each time. The company is not very IT savvy and does not understand. I am compiling an email stating why I need these rights on a permanent bases. I am pretty technical but not good with words. I am looking for reasons why I would need these rrights, such as installing printers on a network computer.

Answer 1

Your the admin at the company and you dont have domain admin priviledges?



If you are the actual Network admin then that is not right



You are pretty much the only person that needs to be a domain admin. Who is telling you that you cannot have these rights because I would not want them touching my servers.



If you are the network admin then not having domain admin rights pretty much means that you cannot do your job unless you have access to the admin user account or any admin account.



If your job description says that you need to do anything that requires admin rights much as managing user accounts, installing printers, working on any servers then you can simply say that in order to do the job you are required to do then you need to have access to be able to do the tasks.

They cant say no if it is a job requirement.

If that doesnt work then whenever you need admin rights just skip the task you are doing and say you dont have access to do it.



Problem Solved

Answer 2

Unless you are an administrator that maintains the domain controllers and the entire domain, then you have no need for domain admin rights. No one in there right mind will just give domain admin rights out to just anyone because they can really do some damage if they decide to get curious and have no clue what they are doing. If all you are doing is installing printers, software, etc. All you will need is those rights over the OU that you work in.

Answer 3

Typically in a organization, domain admin rights are only given to authorized IT staffs which helps them perform troubleshooting works or administrative task such as the one you mentioned. without this rights, they are basically handicapped and won't be able to perform system level configuration or domain based administration.



On the other hand, holding administrative rights will give you ultimate powers to everything within your domain. such as accessing to user home folder, delete end users files and etc. which is why some bosses find it hard to release it.



Fortunately, there are audit trails or event log presents to be configure to trace those activities. so you may want to proof to your boss that this will only be used for company use, not for personal interests, protect and safeguard the administrative account, give him the assurance that everything is in good hand.