To make security of 2008 Server same as 2003 server

which are the settings needed to make remote admin equivalent user to do all tasks as local administrator.

like elevating etc...
sulu999Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Robin CMSenior Security and Infrastructure EngineerCommented:
Are you sure you want to do that? Really sure?
2008 is more secure by default for a reason...
But sure, turn off the firewall. That's the main difference. Depends what you mean by "remote admin" though, do you mean Remote Desktop Connection onto the server console?
If so you can turn off UAC, and also turn off the requirement for NLA on the remote desktop connection.
If you can clarify then I can tell you how to do it... but I'd really really advise updating your procedures rather than downgrading the server security if at all possible.
sulu999Author Commented:
Yes I mean remote desktop user should be able to execute all tasks as that of local loged in administrator,
also clear me these terms UAC ,NLA ?

after doing the software installation by remote desktop the server will be made secure and it will be on production site.  normal user with admin priviladges should be able to install aplication software .
with out using runas command.

Guru ,now you got clear picture ,
Robin CMSenior Security and Infrastructure EngineerCommented:
UAC is User Account Control: http://technet.microsoft.com/en-us/library/cc709691(WS.10).aspx
It's what makes everything run with normal user privileges but prompts you when software needs full administrator rights (usually greying the screen).

NLA is Network Level Authentication: http://technet.microsoft.com/en-us/library/cc732713.aspx
It helps ensure that when you make a Remote Desktop Connection you are actually connecting to, and thus providing your username and password to, the computer that you *think* you are.

Obviously your remote deskop user should be a member of the local administrators group too, same as on any version of Windows.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.