Re: administrator access without adding to administrators group


"Michael Bednarek" <mbATmbednarek.com@xxxxxxxxxxxxxxxxx> wrote in message
news:qje34352j7ori0m76p112e3u66u27578hj@xxxxxxxxxx
On Mon, 7 May 2007 09:53:06 -0700, mcp wrote in
microsoft.public.win2000.security:

I have created a domain account that I want it to be a local adminitrator
on
all servers in the domain. I want to do this without adding the user to
the
local administrators group. Is that possible? Is this something that could
be done from the local security policy?

I suspect that generous use of NTRIGHTS might achieve what you have in
mind.


That could certainly cover part of it, not all.

For example, filesystem permissions, registry permissions,
com/dcom component permissions, per-service permissions,
service manager permissions, etc..

Roger


.

Relevant Pages

  • Re: ACL Permissions
    ... is denied access normally to the local administrators group to see what ... has deny permissions applied somewhere along the line. ... the user is a member of is not. ... >> for the regular user account. ...
    (microsoft.public.windows.server.general)
  • Re: ACL Permissions
    ... is denied access normally to the local administrators group to see what ... has deny permissions applied somewhere along the line. ... the user is a member of is not. ... >> for the regular user account. ...
    (microsoft.public.windows.server.networking)
  • Re: ACL Permissions
    ... is denied access normally to the local administrators group to see what ... has deny permissions applied somewhere along the line. ... the user is a member of is not. ... >> for the regular user account. ...
    (microsoft.public.windows.server.security)
  • Re: administrator access without adding to administrators group
    ... all servers in the domain. ... local administrators group. ... For example, filesystem permissions, registry permissions, ... service manager permissions, etc.. ...
    (microsoft.public.win2000.security)
  • Re: MLS App wont run on TS
    ... > If I add the domain users to the local administrators group - it works. ... > permissions for EVERYONE to FULL - still no luck. ... > I tried using the tool APPSEC - but no luck either. ...
    (microsoft.public.windows.server.general)