The company I recently hired on with has domain controllers in each site with Backup Exec installed. Management wants the systems administrators to have remote desktop ability to manage the backups. Management only wants the administrtor in that site to have permissions to that DC and no others. To accomplish I this and be able to control individual access would be to create an OU in each site, copy the default DC policy to it, and add that administrator to the Allow access via Terminal Services. You also have to add the administrator to the Remote Desktop Users group. I have about 8 sites around the globe in which I have to configure. If there is a better way to accomplish this please pass along suggestions.