Local administratotor rights on target machines

Dear All,
As part of requirement, I have to provide a domain account with local
administrator privileges on a subset of machines. To accomplish this, I
created a GPO for those machines.

In 'restricted groups' [under Computer Configuration -> Windows
settings -> Security settings] added 'administrators' group, and
made this account member of this group.

Though I achieved my purpose, I feel that I gave elevated privileges
to this domain account. Kindly suggest me any better solution where I
can give this domain account only local administrator privileges on the
targeted computer accounts?

Regards
Ram

.

Relevant Pages

  • Re: Access denied when trying to specify Receive Location Properties
    ... Be sure you're logged in using a domain account ... Make sure that account is part of the BizTalk Administrators group on the ... machines in question. ... > on my test server, and if so, is it the actual test server or the BTS ...
    (microsoft.public.biztalk.general)
  • Re: How to prevent users from logging on the local machine?
    ... > I set up an active directory environment in my network. ... > machines' credentials. ... give them a Domain account only. ... do not make their Domain account an Admin ...
    (microsoft.public.win2000.active_directory)
  • Re: Best Way to Share a Secret String Between Member Servers?
    ... when going off-box to other domain machines, ... If we must use a domain account of a user and specify a password, ... is there a way to encrypt a string on a member server such ... am wondering if there is a way to do the DACL permissions to the target ...
    (microsoft.public.security)
  • Re: DPAPI User Store Does Not Work as advertised
    ... Store this key on a central store ... > I am following the above article to implement DPAPI User Store to ... I have created a domain account that my win services ... > on both machines and my COM+ compoenents also on both machines uses. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Issue w/ hotfix 840987
    ... I have the same problem with over 100 machines. ... >> I have an SUS server setup at work and Thursday night I approved the ... >> recovery message when they logged on to their computer. ... >> in with a domain account. ...
    (microsoft.public.windowsxp.network_web)
Loading