Remote Administrator Rights

Posted on 2013-06-17
Last Modified: 2013-06-21
I need to give a 3rd party administrative access to an ERP server attached to our network SBS Server 2011.  I do not want to give the 3rd party administrative rights to the network server, only the ERP server.  How do I set up a user profile for limited admin rights?
Question by:Ramcomis
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 22

Expert Comment

by:Adam Leinss
ID: 39252948
Just add their domain account to the LOCAL administrators group on the server itself.

Author Comment

ID: 39252968
I have done that, but because it is a server I cannot authorize them to access it thru our remote access page unless they are a member of the network admin group.
LVL 22

Expert Comment

by:Adam Leinss
ID: 39253005
Does this 3rd party offer anything like Webex?  That's usually what the vendors I deal with use when I need to give them access to one of my machines to do troubleshooting.

Also, you could load something like Crossloop ( and then share the desktop that way and then remove the software when you are done.
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users


Author Comment

ID: 39253025
We have used webex in the past, but this will be an ongoing project where we want them to have remote access to the machine.
LVL 82

Accepted Solution

David Johnson, CD, MVP earned 305 total points
ID: 39255141
Actually you can give them access without them being a member of the network access admin group. Just create a group polity that targets that machine ONLY.

Expert Comment

ID: 39255995
hello there,

as far as remote access through mstsc is concerned, you can just add any user (local or domain) to local remote users group, without adding to any of the administrative groups.

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question