Security

Ask something
Discussion Locked

Granting Domain Admin access to a user

0 helpful
5 replies

by tnunetworksupport 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I was asked this morning why we should not give Domain Admin access to a particular user that wishes to install/manage/own a server in his department.

Realizing that the question should not be answered with the use of a pugil stick and a horizontal butt stroke, I placed the pugil stick back in the closet.

My best answer is to define what Domain Admin access means. Knowing that I don't have all of the answers, I would like to hear your thoughts on this matter.

In defense of the 'higherup' that asked the question, he does understand the ramifications of such a change. However, he is looking to me for the facts.

Thank you in advance,

-Joe

5 replies

by fgarber

Domain Admin access is not necessary if you give the user administrator rights on the local server. In user manager for domains select file, click on select domain then key \\servername in the domain field. Now you can set up an administrator account for the user that can only administrate that machine.

by chuck rothman, gsec

The "higher up" probably needs an explanation more than anything else. It's possible he thought you needed to be the Domain Administrator in order to have Administrator rights on one particular computer. Possibly the person planning to run the server asked him for it.

The best answer was not to take the request literally (he may not have known what he was asking), but to say, "sure, I can give him administrator rights. That will let him do everything he needs."

by tnunetworksupport

Mr. Rothman,

Thanks for your input. Sometimes it is too easy to look at questions literally. Maybe it's too much time around computers. :)

Thanks again. -Joe

This discussion is closed to new replies.