admin rights on windows server

can you provide some practical examples of when an employee needs to be granted local admin permissions on a windows server, i.e. what tasks require admin permissions. we are risk assessing all accounts with admin access to the servers and could do with some common tasks on windows servers whereby admin rights are essential
LVL 3
pma111Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Muhammad BurhanManager I.T.Commented:
is this Domain Environment or Workgroup ?
0
pma111Author Commented:
domain env
0
Sajid Shaik MSr. System AdminCommented:
in domain scenarios some sort of the servers like Database, Application servers etc, kind of servers need administrative spillages to Install, Access Admin level privileges it's mandatory to give the local admin rights to the related specific server Administrators.

 i hope you got the point.

all the best
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Muhammad BurhanManager I.T.Commented:
there is no need of local/domain admin rights for any ordinary employee except IT related persons because they are responsible for managing backups, event logs, user accounts, scheduling tasks, etc.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Sajid Shaik MSr. System AdminCommented:
if the scenario is for users ... in case a user is accessing shared folder on that machine or any shared resources you can give that specific user per mission to full access on that specific resource to share that folder with others

i.e Accounts department can share all files with all department users and manager is having full access right to access delete create folders, sharing permissions on that specific folder or resource.

all the best
0
rindiCommented:
Even for those working in IT, make sure you give them two accounts, one to logon as user, and a separate account that has the necessary admin rights which they would use when elevated rights are needed. Teach them not to logon to the PC/Server with that account, but rather just to open the application or whatever it is using it, for example when UAC pops up.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.