Re: Security setup


Advanced security does not require schema extending.
We never need domain admin rights, we do need admin rights on all
clients if you want to use client push. (Some people use domain admin
accounts for these but there are definitely other options).

Kim Oppalfens
MVP SMS
In article <9F6D212F-7F2D-47DF-8945-D5C9AAB11661@xxxxxxxxxxxxx>, "=?Utf-
8?B?RWQgTWFzb24=?=" <Ed Mason@xxxxxxxxxxxxxxxxxxxxxxxxx> says...
> I am wanting to install SMS 2003 SP1 where the servers will be in AD but we
> will not be extending the schema. Can I use Advanced Security or do I have
> to use Standard Security. Do I need an account with Domain Admin rights for
> either of these modes?
>

--
Kim Oppalfens
SMS MVP
.

Relevant Pages

  • Re: Admin Acct
    ... > We have an obligation in security documentation to discuss the least ... > SMS without Domain Admin rights. ... >> wants to use advanced security, local admin rights and no domain admin ...
    (microsoft.public.sms.admin)
  • Re: Admin Rights on Client
    ... Log in to the client as the local Administrator and password, set the domain window to the machine's name before clicking OK. ... You will be prompted to provide your domain admin ... Subject: Admin Rights on Client ...
    (microsoft.public.windows.server.sbs)
  • Re: Admin rights for an OU
    ... >> Equivilant to Domain Admin rights, ... >Administrators on the Computers in that OU? ... software, install printers, etc. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Admin rights for an OU
    ... over that OU by Delgating control. ... >> Equivilant to Domain Admin rights, ... >Administrators on the Computers in that OU? ...
    (microsoft.public.windows.server.active_directory)