Re: Developer accounts

From: Anthony Yates (anthonyDINGyates_at_airDONGdesk.com)
Date: 12/03/04 

Date: Fri, 3 Dec 2004 12:54:39 -0000

Is your question "Can I give them specific rights to do only this without
being local admins" or "How should I work around not being able to do this
except as a local admin" or "What is best practice for developers installing
software on production servers"? They are different questions.
Very briefly, if you do not trust them as local administrators of the
server - for whatever reason - then you should install the software yourself
and let them configure it. There are many variations depending on the
software. For example, SQL Server can be fully managed as a SQL admin
without being a local admin.
Anthony

"Kevin Wheeler" <kevin.l.wheeler@lmco.com> wrote in message
news:uPD4tFI2EHA.1296@TK2MSFTNGP10.phx.gbl...
> All,
>
> I would like to allow software developers to install and configure there
> software applications on my servers. However, I don't want to give them
> administrators rights. What are some best practices for doing this? I
> would also like to allow them to connect using remote desktop connection
to
> the server, with giving them administrators rights.
>
> Kevin
>
>
>
>
>
>

Relevant Pages

  • Re: Must loosen security screws for vendor
    ... It's quite ridiculous for apps to require that users have local admin ... rights but requiring that they be able to logon on to the server is ... How are you able to restrict users to ONLY logon to ... > Can I give them access to it, then take away all of their rights? ...
    (microsoft.public.windows.server.sbs)
  • Re: Local Server Security Problem
    ... you dont by any chance have it in a domain and you are logging in as the ... local admin which may be restricted, ... > At the server itself I login with a user with administrator rights on the ... > server and I DON'T have rights to do anything. ...
    (microsoft.public.win2000.security)
  • Re: how to forbid users to connect directly to printers
    ... they have already been granted local admin rights, ... Perhaps this is a silly suggestion, but if you don't give users ... set this to only allow access from the server. ...
    (microsoft.public.windows.server.general)
  • Re: Local admin terminal server
    ... rights that the application needs to run and grant *only* those to your users. ... For example, you *may* need to grant the users all ntfs permissions except Change Permissions & Take Ownership to the specific program's folder, as well as its specific key under HKLM. ... I have setup a terminal server and when they connect to the terminal ... I guess to run the application they need Local admin rights.. ...
    (microsoft.public.windows.terminal_services)
  • Re: SCW question.
    ... Created a new Server and installed IIS. ... and saw that the default rights for IUSR and IWAM users are there. ... Server to the domain without and GPO's applied...Local Security policy ... rights (which coincides with my Member server GPO settings). ...
    (microsoft.public.windows.server.security)