In a meeting today and had a bit of a heated discussion with the Director of IT. I was calm and collective but the other guy became defensive and unprofessional. I gave him my professional opinion on the importance of separation of duties and roles in relation to managing AD. In a nutshell, I advised that we shouldn’t have too many hands in the pot and that managing users should be delegated to the admins, rather than the techs; but the Director threw his “30 years of experience” and that’s how he’s always had it done. After that conversation, I lost all respect. No point in “teaching” an old dog new tricks. I’m actually quite tired of giving and advising security best practices but it seems end users are more important than security. Oh well, at least I tried.