Re: Remote Administration



Good, 'cause my reply would have been N/A otherwise.

If I were admining the same environement all the time I'd invest the time in
the runas shortcuts. If I'm in and out, not managing from the same admin
workstation, or doing very infrequent admin tasks, then I'd use an adminX
account.

I'd only logon to the server directly if there were no other way to perform
the task. RDP sessions are not of any signficiant difference than logging in
at the console under normal operations. RDP to an XP Admin workstation is
another matter.

--
/kj
"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:utguTY2LGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Opps!

Sorry. I re-read my post and do not want to be unclear.

By "remote Administration" I do not mean that I am sitting at home or on
vacation (Cancun, anyone?) and get a phone call from someone in the office
letting me know that I need to do something!

I mean that I am on-site but not going into the server room to sit down
directly in front of a Domain Controller and do this stuff.

--
Cary W. Shultz
Roanoke, VA 24012

"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:OeYmvx1LGHA.2628@xxxxxxxxxxxxxxxxxxxxxxx
Good evening!

Wanted to find out what people are doing in the way of remote
administration. There are several ways to do this. My preferred way is
to install the Adminpak and the 'Exchange stuff' on an Admin workstation
and use an 'Admin account' (can mean several things....member of the
Domain Admins or a delegated account) only when doing that type of work.
And when not doing that I would use my 'normal user account' to do the
day-to-day stuff.

Other possibilities are to use RDP or to use some version of VNC.
Environments would be Windows Server 2003 SP1 with WINXP Pro SP2
workstations. Would really like the input of anyone and everyone. And
maybe from an MVP or two?

Now, what I am not trying to do is to start any wars (similar to 'Root
Hints vs. Forwarders' or to 'mydomain.com vs. mydomain.local'). Just
would like to hear how people are doing this!

Also, Exchange 2003 would be in the mix. Having a web page to handle
most of this is not an option right now (I do not know how to do that
yet....but that will change). I do have an .hta that I created for the
user account object creation.

--
Cary W. Shultz
Roanoke, VA 24012





.



Relevant Pages

  • Remote Administration
    ... administration. ... install the Adminpak and the 'Exchange stuff' on an Admin workstation and ... Exchange 2003 would be in the mix. ... I do have an .hta that I created for the user account ...
    (microsoft.public.windows.server.active_directory)
  • Re: The Microsoft Search service cannot be administered under the present user accou
    ... When you changed the SQL-Service to run with Local User account (with admin ... rights), did you make this change in the SQL Server 2000 Enterprise Manager ...
    (microsoft.public.sqlserver.fulltext)
  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • Re: Vista Bus to SBS2003R2 connectcomputer problems . . .
    ... Have turned off the User Account ... Control feature since this apparently locks some parts of the system drive ... Also tried all flavours of running the procedure with admin rights. ... Small Business Server Network Configuration Wizard: ...
    (microsoft.public.windows.server.sbs)
  • RE: Exchange Administration Question
    ... If you are using Exchange 2003 then the administrator account by default is ... admin or no and then adding the account to the ACL for a mailbox in ADUC by ... You can always remove the domain admin group from the membership in their ... If you remove the domain admin group from their user account then they will ...
    (microsoft.public.exchange.admin)