Re: Domain Admin Acct

Hi,
Answered in .admin forum. Tip: posting to a single forum is preferable, but
if you really need to hit more than one forum, use cross-posting. In Outlook
Express, just add the additional newsgroups to the To: line. In the web
interface, there is some help online for how to cross post. Thanks!

--
Cathy Moya, CISSP, MCSE: Security
Technical Writer, Windows Enterprise Management Division User Assistance

Check out the SMS Technical FAQ:
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
This posting is provided AS IS with no warranties and confers no rights.

"my_key" <mykey@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D5A6C792-02E3-4D2C-A05C-DAE3D7B05A97@xxxxxxxxxxxxxxxx
> With SMS 2003 Deployed, supporting 15,000 mixed clients in an NT domain
> and
> 2000 in an AD domain. My company wants to create a new domain! Collapsing
> the
> others eventually.
> The central site is in the NT domain
>
> I am the only SMS admin, I am certified and have nearly 5 years, 18 hours
> a
> day, hands on experience. I presented a project plan suggesting a
> combination
> of stratagies based on the different domains and the lack of additional
> servers.
> I wanted to try and make things as seemless as possible, maintaining
> services, patch management, software distribution, remote tools and at the
> same time be prepared to assist in the new rollout. Unfortunately
> management
> wants to use advanced security, local admin rights and no domain admin
> rights
> for myself.
> they feel I only need rights to the sms servers and systems. I advised
> them
> it would be a nightmare and that I felt that it was not the appropriate
> method. We could apply advanced security once AD is deployed but that as
> the
> only SMS Admin it would present me with unimagineable management overhead.
> I
> believe that for Microsoft to state that SMS admins don't need domain
> accounts is very misleading!
>
> How do you troubleshoot corrupt clients or run scripts or do manual client
> installs. How do we use Network Monitor, trouble shoot wins, dns, dhcp or
> sites issues?. Try and think of doing day to day ops without domain admin
> accts. When you say admin rights as opposed to domain admin in your
> documentation the issue is blurred or misunderstood.
> Please advise.
>


.

Relevant Pages