Question for all DBAs out there

I am wondering if people think that a DBA should be able to access their databases from any machine within an authorized domain or if they should only be allowed to access them from specifically defined machines.

I am including a poll for this, but feel free to post why you feel one way or another.

Thanks for your input in advance!

The access is defined by company policy. In our company for example, the DBA can access the database from any machine, provided he's logged into the VPN.

I think that you should be able to access the databases from any machine in the domain. But that is as abhijit says upto the company