Why this matters
Password resets and account problems are among the most common first line requests in any organisation. Ghanaian IT support adverts regularly name Microsoft 365, Active Directory, user account management and access control. Handled well, accounts keep data safe; handled carelessly, they are the easiest way in for attackers.
Central accounts
Small shops may use separate accounts on each computer. Larger organisations manage accounts centrally so one sign in works everywhere and IT can control it from one place:
- Active Directory runs on Windows servers inside the organisation and manages users, computers and groups.
- Microsoft Entra ID (earlier called Azure AD) is Microsoft's cloud directory behind Microsoft 365 email, Teams and OneDrive.
- Google Workspace has its own admin console for Gmail, Drive and other Google work apps.
In each, you create users, put them in groups (such as "Accounts" or "Teachers") and give access to groups rather than to individuals. That makes changes quick and consistent.
Least privilege and the account lifecycle
- Least privilege. Give people only the access their job needs. A receptionist does not need the finance folder. Even IT staff should use an ordinary account for daily work and a separate admin account only when needed.