Re: Rights needed to install servicepack/hotfix on DC

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Eric Chamberlain, CISSP (eric.chamberlain_at_newsgroups.nospam)
Date: 06/05/04 

Date: Fri, 4 Jun 2004 22:09:53 -0700

"dude" <dude@aol.com> wrote in message
news:%23xaVzZkSEHA.2780@TK2MSFTNGP09.phx.gbl...
> I need to grant my regional admins the rights to install service packs or
> hotfixes on Win2k DCs without granting them the Domain Admin rights. Is
> this possible?
>

To directly answer your question, yes, you can add them to the
Administrators group. I think what you are really trying to ask is: can
they modify any file on the server without impacting security, the answer is
no. If they can change system files, they can do what ever they want with
the machine and forest. 

-- 
Eric Chamberlain, CISSP
Campus Active Directory Architect
Central Computing Services
University of California, Berkeley
http://calnetad.berkeley.edu