You do it the same way you protect the company from head of Sales running off with your client list, or the head of Accounting embezzling funds, or the Stock manager from running off with half the inventory, largely: Trust, but verify. At the very least, I would require that all passwords for all Administrator … Read more
Once upon a time I had an opportunity to decide on a naming scheme. So I went round and asked my developers, who after all were the people who had to work with these names on a day-to-day basis, whether they preferred functional names (that is, names which represent, in some encoded form, the purpose … Read more
I’d start with: Always have a backup system of some kind. Even better if it has a history. Consider single points of failure and how to deal with them should they fail. Depending on the amount of computers involved, looking into some way to make and create a standard image across computers will make everyone’s … Read more
This has been a fun topic of discussion on Server Fault. There appear to be varying “religious views” on the topic. I agree with Microsoft’s recommendation: Use a sub-domain of the company’s already-registered Internet domain name. So, if you own foo.com, use ad.foo.com or some such. The most vile thing, as I see it, is … Read more
In practice, people who buy from enterprise vendors (HPE, Dell, etc.) do not worry about this. Drives sourced by these vendors are already spread across multiple manufacturers under the same part number. An HP disk under a particular SKU may be HGST or Seagate or Western Digital. Same HP part number, variation on manufacturer, lot … Read more
Absolutely you should. It’s not just common sense from a security POV, it should also be practice as matter of business ethics. Let’s imagine the following scenario: Alice leaves, and her computer is transferred to Bob. Bob didn’t know it, but Alice was into illegal shota porn and left several files tucked away outside of … Read more
Since the previous answers to this question were written, there have been a couple of RFCs that alter the guidance somewhat. RFC 6761 discusses special-use domain names without providing specific guidance for private networks. RFC 6762 still recommends not using unregistered TLDs, but also acknowledges that there are cases where it will be done anyway. … Read more