Giving admins Local Admin to DC's not Domain Admins

Giganews Newsgroups
Subject: Giving admins Local Admin to DC's not Domain Admins
Posted by:  Brodieman (Brodiem…@discussions.microsoft.com)
Date: Fri, 15 Aug 2008

Hi guys

I have a requirement to be able to let certain sets of administrators the
ability to login to domain controllers with out permissions over the whole
domain.

Althought I can give the users PowerUser or LocalLogon rights via making a
domain security group a member of the PowerUser or LocalLogon group there
does not appear to be a local admin group on DCs.

Can you with Server 2003 give a user just local admin to a DC without DA
rights???

Replies