UNSOLVED
Disabling sysadmin account
We have created named accounts on our VNX server with sysadmin privileges. Our Security Officer is asking us to disable the admin and sysadmin user accounts and only activate them when EMC support needs to Webex in.
Is it safe to disable/lock sysadmin accounts. Is there anything in the VNX dependent on having these accounts active.
Thank you,
Mike
adhamakady
65 Posts
535
0
Posted August 6th, 2015 04:00
Hello Mike,
Regarding your main question, you can delete the sysadmin account as long as there is another global admin user, but I'd make sure the Unified connection (Block to File) won't break, and no Domain issues will be caused. If your system is Unified (has a File portion), I wouldn't delete the sysadmin account at all, you'll need to verify the credentials of the global account on the Control Station, and until you do that, there can be disruption.
See https://support.emc.com/kb/14971: How to check if Block and File portions of VNX storage system are correctly fused
In any case, I don't see a reason for deleting the sysadmin account, and if there is a security concern, you can change the sysadmin password, and enter it yourself in case there is a WebEx with EMC support for example.
If your system is block only, you can delete the account, but you'll need to let the EMC engineer(s) know the new credentials in case there is a problem, and in urgent cases, it is just way more convenient to have the credentials on hand for fast troubleshooting.
Adham