The Importance of Tiered Administration in Cybersecurity

👀Would you give the janitor and interns a key to the server room?

Sounds ridiculous, right? But if you’re using the same admin account for everything—web browsing, daily IT tasks, and privileged access—you’re doing the exact same thing.

Tiered administration is just common sense security. Separate accounts for daily tasks and admin work. Keep privileged access securely separated until needed. Because once an attacker gets in, they’re heading straight for the “server room.”

You Should Know:

To implement tiered administration effectively, here are some practical commands and codes for managing accounts and privileges in both Linux and Windows environments:

Linux Commands:

1. Create a new user for daily tasks:

sudo adduser dailytaskuser 

2. Create a separate admin user:

sudo adduser adminuser 
sudo usermod -aG sudo adminuser 

3. Switch to the admin account only when needed:

sudo -i -u adminuser 

4. Check user privileges:

sudo -l -U dailytaskuser 

Windows Commands:

1. Create a standard user account:

New-LocalUser -Name "DailyTaskUser" -Password (ConvertTo-SecureString "P@ssw0rd" -AsPlainText -Force) 

2. Create a separate admin account:

New-LocalUser -Name "AdminUser" -Password (ConvertTo-SecureString "AdminP@ssw0rd" -AsPlainText -Force) 
Add-LocalGroupMember -Group "Administrators" -Member "AdminUser" 

3. Run commands as an admin (using Run As):
[cmd]
runas /user:AdminUser cmd
[/cmd]

4. Check user group membership:

Get-LocalGroupMember -Group "Administrators" 

What Undercode Say:

Tiered administration is a critical practice in cybersecurity to minimize risks and limit the attack surface. By separating daily tasks from privileged access, organizations can significantly reduce the chances of unauthorized access to critical systems. Always ensure that admin accounts are used only when necessary and follow the principle of least privilege. Implementing these practices with the provided commands will help you maintain a secure and efficient IT environment.

For further reading on tiered administration and best practices, refer to:
– Microsoft’s Guide to Privileged Access
– Linux Privilege Management

References:

Reported By: Spenceralessi Would – Hackers Feeds
Extra Hub: Undercode MoN
Basic Verification: Pass ✅

Join Our Cyber World:

Whatsapp
Telegram