Remote Administrator Rights

Posted on 2013-06-17
Last Modified: 2013-06-21
I need to give a 3rd party administrative access to an ERP server attached to our network SBS Server 2011.  I do not want to give the 3rd party administrative rights to the network server, only the ERP server.  How do I set up a user profile for limited admin rights?
Question by:Ramcomis
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 22

Expert Comment

by:Adam Leinss
ID: 39252948
Just add their domain account to the LOCAL administrators group on the server itself.

Author Comment

ID: 39252968
I have done that, but because it is a server I cannot authorize them to access it thru our remote access page unless they are a member of the network admin group.
LVL 22

Expert Comment

by:Adam Leinss
ID: 39253005
Does this 3rd party offer anything like Webex?  That's usually what the vendors I deal with use when I need to give them access to one of my machines to do troubleshooting.

Also, you could load something like Crossloop ( and then share the desktop that way and then remove the software when you are done.
Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.


Author Comment

ID: 39253025
We have used webex in the past, but this will be an ongoing project where we want them to have remote access to the machine.
LVL 81

Accepted Solution

David Johnson, CD, MVP earned 305 total points
ID: 39255141
Actually you can give them access without them being a member of the network access admin group. Just create a group polity that targets that machine ONLY.

Expert Comment

ID: 39255995
hello there,

as far as remote access through mstsc is concerned, you can just add any user (local or domain) to local remote users group, without adding to any of the administrative groups.

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question