Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


user accounts

Posted on 2010-01-09
Medium Priority
Last Modified: 2013-12-04
My Managers are nice enough to hire a temp while I learn our companies software. while the temp is here he/she will need a decent amount of access to the network, however, I'm reluctant to give Administrator access.  On a windows 2003 active directory domain, is there a group I could put him/her in that should be sufficient but isn't Admin?
Question by:JeffBeall

Accepted Solution

Jumbobazman earned 668 total points
ID: 26275280
Yes - there are several priviledge accounts in active directory

This page should clearly show you what they are and what you can assign this person to

LVL 21

Assisted Solution

farazhkhan earned 664 total points
ID: 26275345

Well, It depends what level of access you want to grant him/her or what would be the his/her responsibility under your absence.

In my cases, I assign user to "Account Operators" & "Server Operators" group so he/she can  create, modify, and delete accounts for users, groups, and computers located in the containers and OUs - except for the Domain Controllers OU. Cannot modify the Administrators or Domain Admins group. Also he/she woule be able to back up and restore files.

This list will also be helpful for you to decide: http://www.learnthat.com/Certification/learn/1095/Administering-Windows-2003-MCSE/page/40/

Faraz H. Khan
LVL 10

Expert Comment

ID: 26275347
Are there any specific rights that you are wanting to give?  For instance, if this person needs to do backups, you can make them a member of the backup operaters group.  There isn't really a power user group in AD; only on a local machine.
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.


Author Comment

ID: 26275413
"Are there any specific rights that you are wanting to give?"
he/she will have to admin user accounts and probably backup servers.
LVL 10

Assisted Solution

lobo797 earned 668 total points
ID: 26275501
Then I would do like Faraz is suggesting.  In the users AD account, add to the members of tab "Account Operators" & "Server Operators".  This would include the ability to backup and restore files.

I would be reluctant to give any more rights than listed to a temp than absolutely necessary.  I would rather start with less and increase to more when needed.

Author Closing Comment

ID: 31675055
thank you, that was very helpful.

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange administrators are always vigilant about Exchange crashes and disasters that are possible any time. It is quite essential to identify the symptoms of a possible Exchange issue and be prepared with a proper recovery plan. There are multiple…
In my humble opinion (IMHO), TouchDown from Symantec is the best in class for this type of application, but Symantec has end-of-lifed it and although one can keep using it, it will no longer be supported or upgraded.  Time to look for alternatives t…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

564 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question