Beacon Dealer Tech

← All field notes · Identity & Access

Identity & Access

Why "Domain Admin for Everyone" Will Get Your Dealership Breached

By Beacon Dealer Tech · May 14, 2026 · 2 min read

We walk into dealerships every month where the service manager, the controller, and the GM all have Domain Admin rights on the Active Directory environment. The justification is always the same: "It was easier than figuring out permissions." The cost when it goes wrong is the entire dealership offline for a week.

Keep reading — this one is for clients

Field Notes is Beacon Dealer Tech’s in-house knowledge base for dealership IT teams. Sign in with your customer portal account to read the full post and the rest of the archive.

Sign in Get an invite

More in Identity & Access

When a Service Writer Leaves: The 15-Minute Offboarding Runbook

The day someone leaves the dealership is the day their access becomes a liability. Here's the exact sequence we run.

Want this kind of help on tap?

This is what a discovery call sounds like — except about your actual environment, with a written summary at the end.

Book discovery