Making domain account as Local Administrator

Discussion in 'Active Directory' started by Ram, Aug 28, 2006.

  1. Ram

    Ram Guest

    I want to make a domain account as local administrator for a few machines
    for installing and removing software and hardware on them.
    Using restricted groups of the GPO linked to the machines OU, I made him
    as member of the administrators group. Did I give this account more
    privileges than required? Please suggest the best solution?

    Regards
    Ram
     
    Ram, Aug 28, 2006
    #1
    1. Advertisements

  2. Ram

    Anthony Guest

    No. That's the right solution,
    Anthony
     
    Anthony, Aug 28, 2006
    #2
    1. Advertisements

  3. Ram

    Jorge Silva Guest

    Jorge Silva, Aug 28, 2006
    #3
  4. Ram

    Paul Bergson Guest

    If the updates involve making changes to the registry then they will require
    local admin privileges. Using the Restricted Groups is a good solution.
     
    Paul Bergson, Aug 28, 2006
    #4
  5. Ram

    Ram Guest

    Dear All,
    I found that computers can be added to the domain, through this account.
    Is there any way to restrict this? I want this account to have, least
    privileges at the domain level, at the same time making him as local
    administrator on computers.

    Regards
    Ram
     
    Ram, Aug 29, 2006
    #5
  6. Ram

    Paul Bergson Guest

    Paul Bergson, Aug 29, 2006
    #6
  7. Ram

    Ram Guest

    Thanks Paul.

    Regards
    Ram
     
    Ram, Aug 30, 2006
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.