Re: Server Operator Role

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 10/05/04 

Date: Tue, 05 Oct 2004 18:48:16 -0400

Making someone a servop over a member server is rather involved. If you can live
with them being administrators on the member server that will be considerably
easier and let's face it, having srv ops gives someone enough power to be
dangerous on a server anyway so making them admin isn't much of a step.

Anyway you will want to make them admin on the citrix servers, not on the domain
controllers. So set the citrix boxes in a special OU and create a policy for
that OU that has administrators defined as a restricted group and add your users
to that policy or some domain local or domain global group and then add your
users to that group.

    joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Jeff wrote:
> I know that the server operator is for domain controllers 
> only.  However, we need to create an account that is 
> essentially the server operator role for all servers 
> including our Citrix farm.  I created a test user and 
> added him to a new group.  I then blocked that group from 
> running group policies and added the group to Log On 
> Locally on the machine.  He still cannot log in.  What am 
> I missing?
>

Relevant Pages

  • Re: limit users to one remote session
    ... you have no problem to restrict your users to a ... restrictions must of course *not* be applied to Administrators. ... Citrix PS3 comes with its own set of policies, ... MCSE,CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows 2003 - User Logins vs Software
    ... > We have recently installed a Windows 2003 domain server. ... admin, open "Active Directory Users and Computers", locate the workstation ... "Administrators" group under "Local users and Groups". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Rights in TS
    ... registry key that I needed to modify was an HKLM key. ... different subnet for VPN clients is intriguing. ... Administrators have complete and unrestricted access ... Regarding the TS server and AD link - thanks for your reply about ...
    (microsoft.public.windows.terminal_services)
  • Installing Software and Permissions
    ... etc etc on my TS Server. ... Security group and they'll have TS admin permissions... ... Added TS_Admins to the Local group on the TS Server - Administrators ... member of the TS_Admins group and try and install a piece of software.... ...
    (microsoft.public.windows.terminal_services)