- It should definitely be locked down to the specific users who need access. - Local admins (the server's local admin account and the domain administrator account) should have access for things like ...