[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 271
  • Last Modified:

Windows Server Permissions - Admin For A Standard User?

I know this is crazy but I need help!

We have a SBS server 2011 installed with a domain.  All the computers are Windows 7 desktops Pro.

All users have various permissions with only a few select people have access to EVERYTHING.

We have one user that is a regular employee that only has access to network resources (printers) and a few folders on the network file share on the server.

We have been asked by the head of the company to allow her to escalate tasks as an administrator.  For example, they had a new install of SilverLight this morning (actually upgrade) and one of the select people (see above) had to put in their credentials.

Can we set her account or create a new account JUST for this purpose?
0
gta2011
Asked:
gta2011
1 Solution
 
bbaoIT ConsultantCommented:
you may simply add this domain user (or better a group of the same kind of domain users) into target computers' local "Power Users" group, which is allowed to perform most administrative tasks without administrator's title.

you may also customise Power Users' local group to do only selected tasks in order to minimise the risk.

be aware the Power Users is a group of every local computers, not a domain group.

FYI

http://support.microsoft.com/kb/243330
http://support.microsoft.com/kb/825069
0

Featured Post

Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now