General discussion

Locked

Granting Domain Admin access to a user

By tnunetworksupport ·
I was asked this morning why we should not give Domain Admin access to a particular user that wishes to install/manage/own a server in his department.

Realizing that the question should not be answered with the use of a pugil stick and a horizontal butt stroke, I placed the pugil stick back in the closet.

My best answer is to define what Domain Admin access means. Knowing that I don't have all of the answers, I would like to hear your thoughts on this matter.

In defense of the 'higherup' that asked the question, he does understand the ramifications of such a change. However, he is looking to me for the facts.

Thank you in advance,

-Joe

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Granting Domain Admin access to a user

by fgarber In reply to Granting Domain Admin acc ...

Domain Admin access is not necessary if you give the user administrator rights on the local server. In user manager for domains select file, click on select domain then key \\servername in the domain field. Now you can set up an administrator account for the user that can only administrate that machine.

Collapse -

Granting Domain Admin access to a user

by tnunetworksupport In reply to Granting Domain Admin acc ...

Poster rated this answer

Collapse -

Granting Domain Admin access to a user

by Chuck Rothman, GSEC In reply to Granting Domain Admin acc ...

The "higher up" probably needs an explanation more than anything else. It's possible he thought you needed to be the Domain Administrator in order to have Administrator rights on one particular computer. Possibly the person planning to run the server asked him for it.

The best answer was not to take the request literally (he may not have known what he was asking), but to say, "sure, I can give him administrator rights. That will let him do everything he needs."

Collapse -

Granting Domain Admin access to a user

by tnunetworksupport In reply to Granting Domain Admin acc ...

Mr. Rothman,

Thanks for your input. Sometimes it is too easy to look at questions literally. Maybe it's too much time around computers. :)

Thanks again. -Joe

Collapse -

Granting Domain Admin access to a user

by tnunetworksupport In reply to Granting Domain Admin acc ...

This question was closed by the author

Back to Security Forum
5 total posts (Page 1 of 1)  

Related Forums