Re: Administrator but not Domain Admin

Why did this software vendor 'demand' Admin access and if he truly has to have it.... I'd have him sign an imdenifiication agreement...he has the keys to your kingdom.

Robert Trebor wrote: 
          I need to make a software vendor an administrator on a server
running SBS 2003. He demanded this access and the client caved in, so I'm
stuck. We don't want him to be a domain administrator if at all possible,
though, so he can't see another, new server on the network running a
competitor's software-- what's eventually going to replace his. Old Vendor's
software hasn't been fully retired yet and needs immediate maintenance.
Again, I'm stuck with the situation and have to make the best of it. I
started with explicit denys on the other server and unnecessary shares on
the SBS. I made Old Vendor an administrator, but I see that that gives him
the ability to make himself a Domain Admin-- which would let him change
permissions on the other server, among other things. What can I do to
prevent Old Vendor from giving himself Domain Admin privileges while still
allowing him to log on to the SBS? It doesn't have to be 100% bulletproof
but I would like to give some reasonable assurance to the client that Old
Vendor is limited to the SBS, where Old Software is installed.


.

Relevant Pages

  • Re: Delayed email from outside vendor or not arriving at all
    ... I understand that one vendor send email to ... your client will get Delivery Status Notification. ... I suggest we track the not receive email in your client SBS 2003. ... How to Enable Message Tracking Center on a Server ...
    (microsoft.public.windows.server.sbs)
  • Re: How do I forward port 443 to another server WITHOUT ISA?
    ... SBS External NIC right? ... > The problem here is that you have 2 servers that need the same port. ... > 1) Ask your vendor to use another port that is not going to be used (i.e. ... >> on 443 and be forwarded to another server on my LAN. ...
    (microsoft.public.windows.server.sbs)
  • Re: Annual IA Software
    ... the SBs are considered "proprietary" by the vendor and not ... For example, if you want the list of SBs from Piper, ... As for the ADs, each and every one (airframe, powerplant, appliance, et) ... Airframe and powerplant are easy to find. ...
    (rec.aviation.owning)
  • Re: SBS licensing problem
    ... > advise for MS licensing expect. ... > One of our brand office had purchased WIN NT 4.0 SBS. ... we have to upgrade the whole system to Windows 2000 version. ... According to vendor, in order to have the SBS 2000 legal, we have ...
    (microsoft.public.windows.server.sbs)
  • Administrator but not Domain Admin
    ... I need to make a software vendor an administrator on a server ... running SBS 2003. ... We don't want him to be a domain administrator if at all possible, ... I made Old Vendor an administrator, but I see that that gives him ...
    (microsoft.public.windows.server.sbs)