Remote Administrator Rights

Posted on 2013-06-17
Last Modified: 2013-06-21
I need to give a 3rd party administrative access to an ERP server attached to our network SBS Server 2011.  I do not want to give the 3rd party administrative rights to the network server, only the ERP server.  How do I set up a user profile for limited admin rights?
Question by:Ramcomis
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 22

Expert Comment

by:Adam Leinss
ID: 39252948
Just add their domain account to the LOCAL administrators group on the server itself.

Author Comment

ID: 39252968
I have done that, but because it is a server I cannot authorize them to access it thru our remote access page unless they are a member of the network admin group.
LVL 22

Expert Comment

by:Adam Leinss
ID: 39253005
Does this 3rd party offer anything like Webex?  That's usually what the vendors I deal with use when I need to give them access to one of my machines to do troubleshooting.

Also, you could load something like Crossloop ( and then share the desktop that way and then remove the software when you are done.
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.


Author Comment

ID: 39253025
We have used webex in the past, but this will be an ongoing project where we want them to have remote access to the machine.
LVL 81

Accepted Solution

David Johnson, CD, MVP earned 305 total points
ID: 39255141
Actually you can give them access without them being a member of the network access admin group. Just create a group polity that targets that machine ONLY.

Expert Comment

ID: 39255995
hello there,

as far as remote access through mstsc is concerned, you can just add any user (local or domain) to local remote users group, without adding to any of the administrative groups.

Featured Post

Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question