G
Guest
A year and a half ago we split support of Active Directory from the support
of Windows Servers. At the current time we want to remove the Windows Server
Team from Domain Admins and Administrators groups on the domain controllers.
The Windows Server Team (WST) should be able to do all normal tasks like
manage hardware, add/remove apps, run perfmon, change network settings, etc
while only having the ability to add/remove computers from AD.
Is all of this possible??? They would need more permissions than the
default permissions granted to Server Operators. Any try to accomplish this?
of Windows Servers. At the current time we want to remove the Windows Server
Team from Domain Admins and Administrators groups on the domain controllers.
The Windows Server Team (WST) should be able to do all normal tasks like
manage hardware, add/remove apps, run perfmon, change network settings, etc
while only having the ability to add/remove computers from AD.
Is all of this possible??? They would need more permissions than the
default permissions granted to Server Operators. Any try to accomplish this?