Re: Field Support Staff Administration of AD Servers

From: Dmitry Korolyov [MVP] (d__k_at_removethispart.mail.ru)
Date: 03/29/04 

Date: Mon, 29 Mar 2004 19:39:05 +0400

Use Restricted Groups feature of Group Policy to make them members of local
administrators group on the required servers. 

-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  "Michael" <anonymous@discussions.microsoft.com> wrote in message
news:D1FB8DDB-A2C0-4D6B-9885-439D2111CDF0@microsoft.com...
  I am looking into what it will take to give our field support staff access
to our AD environment.  I want them to have full support ability on the
servers that fall into their area of responsibility above and beyond of just
OU administration.  However I do not want them to be a member of the domain
administrators group because I only need them to administer a few of the
servers.  Is anyone aware of MS documentation that explains this in detail?
Has anyone ran into this situation themselves, if so what have you done to
make it work?
  Thanks for everyone’s help!
  Sincerely,
  Michael

Relevant Pages

  • Re: Error 4957 trying to install SMS_MP_Control_Manager
    ... administrators group of these servers? ... This is an SMS 2003 single ... > Background Intelligent Transfer Service is not installed or running. ...
    (microsoft.public.sms.admin)
  • Re: Security loop hole? How to restrict non-admin users
    ... pack 4 and Windows 2003 servers ... The Users are not in the local administrators group or any ... other local group on the remote machine. ... >Please provide us with the current Service Pack you have ...
    (microsoft.public.win2000.active_directory)
  • Re: allow logon through terminal services
    ... We have a mixture of 2000 and 2003 servers. ... >> I have a Telecom user that needs to to be able to logon to ... >> non-server administrators from the domain administrators group. ... >> was one of the members of the domain admins group. ...
    (microsoft.public.windows.terminal_services)
  • No Domain Group shows up....
    ... ...in the local Administrators group. ... But in these servers, ... I noticed that it recognizes me as the domain admins even though D.A group ... to Administrators group, nothing but local administrator shows up. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Rid AD of Circular Group Membership
    ... and have use on members if it is used there. ... Administrators group is still intact), nor do they have empowerments over ... Admins is being used for by the 30+ can be delegated I(ex. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)