local admin rights to particular domain controller

  • Thread starter Thread starter Jason Tomita
  • Start date Start date
J

Jason Tomita

Is there a way to give an Active Directory user object
local administrator rights to a domain controller? I have
a service account that I want to restrict rights to a
particular domain controller, but I want the svc account
to have full permissions to services etc (like a local
administrator account). Usually I would just add this user
account to the local Administrators group, but on a DC,
this is disabled. thx
 
No, you can not assign Admin rights only to a particular DC. You must move
the service to another server for that.

--
Regards

Matjaz Ladava, MCSE, MCSA, MVP
Microsoft MVP - Active Directory

(e-mail address removed)
http://ladava.com
 
Back
Top