Solved

Delegating control of a single windows 2003 server in a domain

Posted on 2011-09-16
3
197 Views
Last Modified: 2012-05-12
We have regional centers and each regional center has a local DC. We have a tech at each regional center and I am wondering what would be the easiest way to give him "local" administrative privileges on the DC. I do not want to make him a domain admin. I would normally do this by going into Computer Management and assigning him to the local administrator group but this being a DC that is not an option. Any feedback is appreciated.
0
Comment
Question by:J C
3 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 250 total points
ID: 36550904
What kinds of things do you need him to do, unfortunately there is no easy way to be a full admin on a DC short of making them builtin admins/domain admins.    

Thanks

Mike
0
 

Author Comment

by:J C
ID: 36550923
To be able to start/stop services.
0
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 250 total points
ID: 36555606
You can delegate control to non admin account to perform certain admin acitivity like reset password,create user,delete user,etc.

To delegate rights to control the sytem service:
http://www.windowsitpro.com/article/permissions/how-can-i-delegate-permission-for-a-user-or-group-to-control-certain-services-

0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question