Solved

Administrator Permissions without Administrator Password

Posted on 2013-01-04
3
300 Views
Last Modified: 2013-01-14
We want to give an employee permissions to kill any user's processes and restart Windows Server 2008 servers, but don't want the employee to know or be able to change the administrator's password.  Is there a way to give a user all administrator permissions except being able to change the administrator's password?
0
Comment
Question by:Declan_Basile
3 Comments
 
LVL 12

Accepted Solution

by:
aindelicato earned 250 total points
ID: 38745486
Server Operators group gives some of these permissions.

I'm not sure it allows for killing processes, or services, but you could create a specific security policy that you deploy via GPO to these servers and add the "Server Admins" to the specific rights that your wanting.
0
 
LVL 11

Assisted Solution

by:netballi
netballi earned 250 total points
ID: 38745674
You can give delegated rights and have granular control as to what permission the user can have,

have a look at the following link.

http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html
0
 
LVL 1

Author Closing Comment

by:Declan_Basile
ID: 38774579
Thanks.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now