Administrator Read Only

From: Toby Richards (anonymous_at_discussions.microsoft.com)
Date: 07/15/04 

Date: Thu, 15 Jul 2004 08:14:16 -0700

Is there a way to give a user all the priviliges to look
at anything an Administrator can see, but prevent him from
making any changes. In my case, we're hiring a security
guy whose job will be to look for security flaws, but not
to change anything. Among other things, he'll need to run
MBSA on the domain, see group policies and event logs, and
audit file and folder permissions.

Relevant Pages