Field Support Staff Administration of AD Servers

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am looking into what it will take to give our field support staff access to our AD environment. I want them to have full support ability on the servers that fall into their area of responsibility above and beyond of just OU administration. However I do not want them to be a member of the domain administrators group because I only need them to administer a few of the servers. Is anyone aware of MS documentation that explains this in detail? Has anyone ran into this situation themselves, if so what have you done to make it work

Thanks for everyone’s help

Sincerely
Michae
 
Use Restricted Groups feature of Group Policy to make them members of local
administrators group on the required servers.


--
Dmitry Korolyov [[email protected]]
MVP: Windows Server - Active Directory


I am looking into what it will take to give our field support staff access
to our AD environment. I want them to have full support ability on the
servers that fall into their area of responsibility above and beyond of just
OU administration. However I do not want them to be a member of the domain
administrators group because I only need them to administer a few of the
servers. Is anyone aware of MS documentation that explains this in detail?
Has anyone ran into this situation themselves, if so what have you done to
make it work?

Thanks for everyone’s help!

Sincerely,
Michael
 
I am looking into what it will take to give our field support staff access to our AD environment. I want them to have full support ability on the servers that fall into their area of responsibility above and beyond of just OU administration. However I do not want them to be a member of the domain administrators group because I only need them to administer a few of the servers. Is anyone aware of MS documentation that explains this in detail? Has anyone ran into this situation themselves, if so what have you done to make it work?

Thanks for everyone’s help!

Sincerely,
Michael
Click to expand...

In addition to delegating OU Administration, you could add the Domain Support
Group to the local Administrators group on the 'few' servers. Depending on what
you want them to do, this may be all you need.



Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Back
Top