Making domain account as Local Administrator

Discussion in 'Active Directory' started by Ram, Aug 28, 2006.

  1. Ram

    Ram Guest

    I want to make a domain account as local administrator for a few machines
    for installing and removing software and hardware on them.
    Using restricted groups of the GPO linked to the machines OU, I made him
    as member of the administrators group. Did I give this account more
    privileges than required? Please suggest the best solution?

    Ram, Aug 28, 2006
    1. Advertisements

  2. Ram

    Anthony Guest

    No. That's the right solution,
    Anthony, Aug 28, 2006
    1. Advertisements

  3. Ram

    Jorge Silva Guest

    Jorge Silva, Aug 28, 2006
  4. Ram

    Paul Bergson Guest

    If the updates involve making changes to the registry then they will require
    local admin privileges. Using the Restricted Groups is a good solution.
    Paul Bergson, Aug 28, 2006
  5. Ram

    Ram Guest

    Dear All,
    I found that computers can be added to the domain, through this account.
    Is there any way to restrict this? I want this account to have, least
    privileges at the domain level, at the same time making him as local
    administrator on computers.

    Ram, Aug 29, 2006
  6. Ram

    Paul Bergson Guest

    Paul Bergson, Aug 29, 2006
  7. Ram

    Ram Guest

    Thanks Paul.

    Ram, Aug 30, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.