Administrator but not Domain Admin

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I need to make a software vendor an administrator on a server
running SBS 2003. He demanded this access and the client caved in, so I'm
stuck. We don't want him to be a domain administrator if at all possible,
though, so he can't see another, new server on the network running a
competitor's software-- what's eventually going to replace his. Old Vendor's
software hasn't been fully retired yet and needs immediate maintenance.
Again, I'm stuck with the situation and have to make the best of it. I
started with explicit denys on the other server and unnecessary shares on
the SBS. I made Old Vendor an administrator, but I see that that gives him
the ability to make himself a Domain Admin-- which would let him change
permissions on the other server, among other things. What can I do to
prevent Old Vendor from giving himself Domain Admin privileges while still
allowing him to log on to the SBS? It doesn't have to be 100% bulletproof
but I would like to give some reasonable assurance to the client that Old
Vendor is limited to the SBS, where Old Software is installed.


.

Relevant Pages

  • Re: Delayed email from outside vendor or not arriving at all
    ... I understand that one vendor send email to ... your client will get Delivery Status Notification. ... I suggest we track the not receive email in your client SBS 2003. ... How to Enable Message Tracking Center on a Server ...
    (microsoft.public.windows.server.sbs)
  • Re: Password Protected Screen Saver and Administrative Password
    ... Password Protected Screen Saver and Administrative Password ... > GoToMyPc allows this vendor to easily setup access to their ... > The server in question is a member server which must be ... > domain administrator to logon to it, ...
    (Focus-Microsoft)
  • Re: connect computer setup fails
    ... The administrator account you use to login - this is an account with ... Les Connor [SBS MVP] ... > willswing01 is the SBS server. ...
    (microsoft.public.windows.server.sbs)
  • RE: Cannot logon as admin during setup/upgrade
    ... I understand that you newly upgraded your SBS 2K Server to SBS 2K3 and now ... quickest solution and a dedicated Support Professional can assist with your ... Last year I changed the Administrator logon ...
    (microsoft.public.windows.server.sbs)
  • Re: Sharing Outlook 2003 calendar
    ... even as administrator i cant log onto the domain (all i can do is log on to ... > Right so the workstation has joined the Domain okay and are you getting ... >> The server can see the workstation in network places. ... >>> Okay is the workstation connected to the SBS Server (sorry silly ...
    (microsoft.public.outlook.installation)