Windows 10 Enterprise provides the tools required to provide a secure environment to access sensitive and valuable information and systems.
There are many options to consider when creating and securing local user accounts that will gain authorized access to your systems. The most important factors are:
- Never log in to computers with local admin rights enabled, use run-as to elevate rights with a separate administrative account
- Never log in to a client computer with domain-privileged accounts, limit logging on to trusted IT PCs only, such as PAW
- Ensure all administrative account passwords are unique across computers, complex, and changed regularly
In the next chapter, we will explore remote administration for troubleshooting and remote assistance.