Domain admin rights with limited capability.

Posted on 2012-09-14
Medium Priority
Last Modified: 2012-09-16
We have a new IT personnel. I want this person to have domain admin rights with limited capability.
I want this limited domain admin to add and remove programs.
I want this limited domain admin to edited the local computer.
Question by:tomfontanilla
LVL 57

Accepted Solution

Mike Kline earned 2000 total points
ID: 38400368
What you will want to do is let them have local admin rights on the computers.  You can do that with restricted groups


Great idea not giving them domain admin rights.


LVL 17

Expert Comment

by:Brad Bouchard
ID: 38400405
Unfortunately if they have Domain Admin rights you can't restrict them like you're talking.  What you could do is do as mkline71 suggested, or make a Security Group and add that group to all the computers you want this person to be able to edit settings on.  Then make that group a member of the administrators group.  It may seem like more work, but if they leave and you have someone new join your staff and you're in the same boat again, you don't have to go add them to the every new computer, you can just remove the old person's account from the Security Group and add the new one.

Author Closing Comment

ID: 38402430
good response.

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question