I was employed as the only system administrator by a company where half of computers are portable ones being taken away for work at home, business trips, visits to clients, etc. having access to practically everything while connected to internal corporate networks.
And most users of computers, even desktops, are administrators. In Windows workgroup(s), no Active Directory/Domain Controller.
- Update: 35+ Windows 7, XP, Vista workstations and two Windows 2003 servers, one running for terminal services (serving to all the
accounting applications), another Windows 2003 Server is for websites/portal and external
access from internet. The office (internal networks) is distributed over 2 main locations (one is the
main office and another is producing facilities in another city) and
the main office has 2 buildings with communication over WiFi.
The employees (sellers, accountants, lawyers) plug portable computers into internal cable network while at office
See mor eonformation on my specific situation in my question How to make sure that previous sysadmin has not compromised corporate IT security? [closed]
What are the most urgent first steps for securing/re-organizing such IT corporate infrastructure and arguments to convince the top management in their necessity?