What is the best practice and advantage of having the local server admin accounts(user accounts) on the SharePoint 2010 server(to login and check the logs) over the sp_farm & sp_admin account. i.e., traceability(who does what), accountability, limited access(PS console, Databases)...
Right now, we are using the SP_Farm/SP_Admin account to log into the server however those are provided with the higher privileges like
-SharePoint Products Configuration Wizard
-Configure and manage the server farm.
-Act as the application pool identity for the SharePoint Central Administration Web site.
-Run the Microsoft SharePoint Foundation Workflow Timer Service.
we could see a potential risk of using those accounts, like what will happen if the account is locked due to some mistake...
and our intention is to log into the server with limited access to check the logs or something of that sort...Can we just give the remote login permission to the users account/groups?