System Administrator access to domain controllers

From: Marc (Marc_at_discussions.microsoft.com)
Date: 09/27/04


Date: Mon, 27 Sep 2004 09:17:03 -0700

I can't seem to find this information anywhere and I'm hoping someone can
help. Management of the active directory in my org is split between the
physical maintenance of domain controllers and maintenance of the active
directory. I am trying to figure out a way in which I can grant a group
access to our DC's so they can maintain them. I have added them to server
operator for local login but they are prohibited from doing certain things
like changing server IP addresses etc. Are there any rights or groups other
then domain admin or administrator I can add them to that would allow them to
change configuration information on a DC? I'm especially concerned with IP
addresses as we are moving DC's from an old data center to a new one. Thanks
in advance,
Marc



Relevant Pages

  • Re: Why do i need to know AD ?
    ... DNS Support for Active Directory Technical Reference ... Is the directory service included in the Windows Server 2000/2003 family. ... controller to interact with domain controllers in the domain running Windows ... used to configure replication between sites. ...
    (microsoft.public.windows.server.active_directory)
  • Re: gracefully removing a child domain
    ... run ADMT to create active user accounts in Active Directory. ... Windows Server 2003 Tools ... How to Upgrade Windows 2000 Domain Controllers to Windows Server 2003 ... ensure that you have designed a DNS and Active ...
    (microsoft.public.windows.server.active_directory)
  • Re: One way AD replication problem
    ... both domain controllers. ... Used ldap to look at the GC through port 3269. ... Set the primarydc to be a global catalog server again. ... Using active directory Users and computers I deleted the computer ...
    (microsoft.public.windows.server.active_directory)
  • Re: RAS errors - removing Everyone from Pre-Windows 2000
    ... When your RADIUS server is not reachable from your VPN server. ... Active Directory directory service record, but it does not have permissions ... Expand your domain. ... Right-click Domain Controllers, and then click Properties. ...
    (microsoft.public.win2000.ras_routing)
  • Re: Active Directory Schema Mismatch
    ... How ever remove all demounted Domain Controllers from the Active Directory. ... Are the adprep tools preformed on your domain in order to upgrade the schema ... compability for Windows Server 2003 Domain Controllers? ...
    (microsoft.public.windows.server.active_directory)