Re: Administrative rights on specified domain controller

That can't be done. Some will dcpromo [even remotely] a domain controller to
a domain member server for non domain administrators to work on and then
dcpromo again when done.

Steve


"Ilya" <Ilya@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1DACD1A1-E023-4B13-9869-46C0354E1E73@xxxxxxxxxxxxxxxx
Hi

I have domain with many DC, i want to grant some user administrative
rights
only on specified DC, not for entire domain. I have read KB240267
("Administrators cannot be restricted in Windows 2000" -
http://support.microsoft.com/kb/240267). It's impossible for Win200, and
what
about Win2003?

Thanks


.

Relevant Pages

  • lockdown dcpromo
    ... May I know whether there is a way to lockdown the dcpromo ... to member of Administrators? ...
    (microsoft.public.win2000.security)
  • Re: Encountered errors while running Exmerge. Please Help!
    ... There is no local administrators group on a domain controller. ... Send AS and Receive As right to the group over the Exchange store object ...
    (microsoft.public.exchange.admin)
  • Re: Terminal Services (Administration mode) Security
    ... the child domain is half way around the world :-) Second issue is just like ... capability when I added the group to the administrators of the local machine ... Do that in Local Security Policy for a domain member and you would ... > domain controller you may want to put in a child OU to the domain ...
    (microsoft.public.win2000.security)
  • Re: administrator unable to logon interactively
    ... All domain clients and workstations run the Windows XP ... domain controller and the secondary domain controller. ... >> administrators group including the administrator can ...
    (microsoft.public.win2000.security)
  • Re: Terminal Services (Administration mode) Security
    ... users local administrators to allow then to logon locally and that could ... Do that in Local Security Policy for a domain member and you ... >> domain controller you may want to put in a child OU to the domain ...
    (microsoft.public.win2000.security)