|
Posted by Joe Richards [MVP] on December 10, 2005, 10:43 am
If you were Registered and logged in, you could reply and use other advanced thread options
Yes, unless the particular servers are DCs themselves. You can't effectively
give admins admin rights only on one or two DCs, DCs share a security database.
--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
WhoC@nItbN0W wrote:
> Hi:
>
> 1. I need to perform separation of duties between administrators so that
> each has access to some particular server as an administrator and as a user
> on the others.
> (2K3 DC; mix of 2k3 and 2k servers)
>
>
> 2. I am planning to go about doing this by performing the following
> a. Change domain administrators to domain users on the DC( except enterprise
> admin)
> b. On a particular servers' 'local user and accts'; I add the domain user as
> an administrator.
>
> 3. Is this a feasible alternative? Any issues seen here by anyone before I
> go about implementing this?
> What about SMS, Updates, others?
>
> TIA
| 
XML site map