Administrators - Local Admins
Administrator accounts need to be controlled and provided the right and sufficient access to resources as necessary. Enabling Password complexity ensures no more weak passwords and makes it hard for brute force attempts to access into the management of the devices. Password profiles help to keep the account active and up to date so that inactive ones gets expired naturally. It is ok to have two local Admin login accounts as a backup mechanism to access the management of the devices. The rest of the Admin accounts should have External authentication defined through Authentication profile.
