Rich
This is rich coming from the company that puts 2x Xbox related services, downloaded maps broker, geolocation service to name a few, on by default in a standard server 2016 build, then publish articles saying you should disable them.
They really need to start practicing what they preach.
It would be great if the reality of just in time and just enough administration was workable in anything below megacorp enterprise. Not sure many of my customers will pay for another couple of server licenses or Azure VMs or whatever for a pair of administrative domain controllers, plus the cost of managing them, protecting them, backing them up etc.
Anyway, just about any MS article you read with instructions to perform some administrative task, such as migrating a server role, they tell you you need domain admin.
Biting the hand that feeds IT
