Re: DC Admin question
- From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
- Date: Fri, 19 Jan 2007 10:00:11 -0500
You can't give him rights to manage that box without him having enough power to escalate all the way to Enterprise Admins.
This has been a topic of many posts since AD came out and the answer has not changed. It will change a little with Longhorn server sometime at the end of this year but will require you to use Read Only DCs in the WAN sites that you want to do that at.
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm
jim wrote:
We've got a DC at a remote site that doubles as the office's file/print server. The problem is that we need to allow our local IT contact to manage user shares, setup printers, etc, but we're not sure how to give him logon rights without making him a domain admin..
Does anyone know of technet white paper (or something) that explains how to get around this?
Thanks in advance!
- References:
- DC Admin question
- From: jim
- DC Admin question
- Prev by Date: DC Admin question
- Next by Date: IAS EAP - TLS Policies question
- Previous by thread: DC Admin question
- Next by thread: Re: DC Admin question
- Index(es):
Relevant Pages
|
|
