Re: What kinds of right I need to gain to the local system adminis
- From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
- Date: Thu, 01 Dec 2005 16:16:45 -0500
Doesn't matter, it is possible for the admins in any domain in a forest to escalate their permissions to enterprise admin if they so desire.
Even in the next rev of Windows Server currently codenamed Longhorn Server the same limitation applies though you can set up a special type of DC called a Read Only DC that you can deploy to a site and allow a local admin to have admin rights of the machine (but not the AD).
joe
-- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net
PeterP wrote:
The branch DCs are the child domain of Headquarter DCs.
"Tony Murray" wrote:
Hi Peter
If the DCs are in the same domain, there is currently no way to provide administrator access to a DC without providing Domain Admins privilege.
You will have to wait for the next version of the Windows Server OS.
Tony www.activedir.org
"PeterP" wrote:
Our company has been setup with both Headquarter and branch offices with Server 2003 DCs. We like to gain the control to each branch office system administrator to manage their own branch office DC like restart the IIS service etc. What is the best way to do? We don’t want the branch office administrators to have control on the headquarter DC at all.
Thanks
.
- Follow-Ups:
- Re: What kinds of right I need to gain to the local system adminis
- From: Todd J Heron
- Re: What kinds of right I need to gain to the local system adminis
- Prev by Date: Re: Corrupted objectGUID
- Next by Date: Re: AD taskpad
- Previous by thread: Re: Corrupted objectGUID
- Next by thread: Re: What kinds of right I need to gain to the local system adminis
- Index(es):
Relevant Pages
|
