Right now I have my Windows Global credentials using a full on Domain Admin account. It works great. BUT I fear that Domain Admin's credentials are getting cached all over the network!
Does anyone have recommended AD account settings to use to still have the ability to do a full scan, BUT not have the ability to do much more (in case hackers get the credentials).
Lansweeper interface warned about using full Domain Admin, but I don't recall any suggestions beyond that.
