Hello all and thanks for your time and expertise. Please note this question is not a hard line technical question per se.
Here's the scenario: There's a tech in my department that has zero IT training or background (doesn't even half an A + Certification) but he's hounding management for Domain level access.
He was brought into the department in a political move (as I work for a school district which is a political cesspool) and was placed in a certain building. He handles some imaging and basic troubleshooting but doesn't even have foundational networking knowledge to know the difference between a one-to-one problem and a genuine network issue. The previous IT Manager gave extremely unqualified folks domain administrator access just so they could reset passwords because he was lazy.
The manager is no longer with us so I've cleaned out the Domain admins group and used Delegation Control to deploy the permissions these techs need to do a level one job. Please note this tech has access to the local administrator accounts, he has full access to imaging servers, and he can disjoin and join computers to the Domain.
He wants his previous access which was Domain Administrator access which I refuse to comply with. I know as I came up the ranks and was a help desk tech or level one tech I had zero access to Active Directory or Switches. I'm just amazed that a guy with zero background feels entitled enough to dictate access.
Please let me know your recommendations for handling this scenario. Am I being unreasonable or should one earn higher level access. Thanks.
