block access to mmc on member server ?

  • Thread starter Thread starter scott
  • Start date Start date
S

scott

Hi,

I need to allow a single user admin rights to a member server. I added his
user name to the local admin group on the member server (the user is still a
domain user only).

When logging into the member server as a domain users (with local admin
rights), the user can load AD users + computers using MMC.

Is there anyway I can block this and other such functions ?

Thanks
Scott.
 
You could deny them access to the mmc console. Or look
through Group Policy and you can deny them access to
the 'Run' option.
 
Back
Top