Administering without Administrator

From: dp (nobody_at_mrspam.com)
Date: 02/12/04 

Date: Thu, 12 Feb 2004 17:19:14 GMT

My fellow ITers...

I'm stuck in a peculiar situation- I am supposed to run, and support a
Windows2003 server and 5 accompanying workstaitons. This server is to be
under the umbrella of the domain "ABC". The person who is supposed to be
administering this for us has our addresses set up as dp@abc.org,
bob@abc.org, etc. and the servers are accessed like \\abc3.abc.org Where
abc3 is my server. The person who installed this, created me a user
account, and then granted that user administrator (some administrator?)
functions. I can't tell exactly what I can, and cannot do. There are also
5 workstations in my group, which this guy has installed, however he hasn't
told me, or any of the people using the 5 workstations what the admin
password is for their workstations either.

What gives here? This doesn't sound like good IT policy- When *I* am god,
if someone doesn't need Administrator, then I don't give it to them, but if
they DO need administrator, I don't fiddle around, I let them have access,
and tell them to be careful what they do.

A layperson asked me "Well exactly what is it that you need the
administrator account for?" I was at a loss really to come up with a clear
concise answer, I mean, I know what sorts of things I do with the
administrator account, looking at print queues, setting up workstations,
administering other things on the server.

Is it really possible to administer without the Administrator account? I'm
I justified in thinking that I ought to have the administrator password for
the server I'm administering? At least to the administrator account on that
server..

What is a good lay person response to why we need to have the administrator
account for the servers and the workstations? My first reaction would be,
"BECAUSE WE CAN'T GET ANYTHING DONE!" But I suppose that is too general.
Anyone got anything else?

-Brian

Relevant Pages

  • Re: Share is denied and user is locked out
    ... At first we noticed the other workstations would not ... workstations (including the server) and reboot with the temporary test ... I would recommend checking the membership of the local administrator ... > administrator account. ...
    (microsoft.public.win2000.security)
  • Re: Only Administrator can access RWW or Oulook web access???
    ... either the SBS server or the LAN workstations? ... able to allow user's access to our Remote Web Workplace. ... or "check with your administrator to see if you ...
    (microsoft.public.windows.server.sbs)
  • Re: Web Server - User Access and Priviledges.
    ... It makes sense to have more than the built in administrator account. ... For the IIS 5.0 server be sure to consider ... running the IIS Lockdown/URLscan tool if you have not already but I would recommend ...
    (microsoft.public.windows.server.security)
  • Re: Web Server - User Access and Priviledges.
    ... It makes sense to have more than the built in administrator account. ... For the IIS 5.0 server be sure to consider ... running the IIS Lockdown/URLscan tool if you have not already but I would recommend ...
    (microsoft.public.security)
  • Re: Web Server - User Access and Priviledges.
    ... It makes sense to have more than the built in administrator account. ... For the IIS 5.0 server be sure to consider ... running the IIS Lockdown/URLscan tool if you have not already but I would recommend ...
    (microsoft.public.inetserver.iis.security)