Make user administrator over a single DC in AD domain

[Jason]

Greetings all,
I have a Windows 2000 AD domain consisting of seven DC's. I would
like to give one of my users administrative rights over one of the
DC's without "giving away the farm" by making that user a Domain
Admin. Is there a way I can accomplish this?
Thanks!
-Jason

 

[Tomasz Onyszko]

Greetings all,
I have a Windows 2000 AD domain consisting of seven DC's. I would
like to give one of my users administrative rights over one of the
DC's without "giving away the farm" by making that user a Domain
Admin. Is there a way I can accomplish this?

What kind of tasks will this user do on the server - maybe just "server
operators" membership will be enough for him? Or maybe "server operators
with delegation of specific tasks in AD ?

 

[Jason]

What kind of tasks will this user do on the server - maybe just "server
operators" membership will be enough for him? Or maybe "server operators
with delegation of specific tasks in AD ?

Hi Tomasz,
The fellow needs to be able to do a few administrative type things.
He's going to handle running the tape backup. He may need to restart
the server every now and again. He may also need to set permissions
on files and folders from time to time. He's currently a member of
backup operators which takes care of the first two. Is server
operators a better choice? Is the ability to set ACL's something that
I can delegate?
Thanks!
-Jason

 

[Tomasz Onyszko]

The fellow needs to be able to do a few administrative type things.
He's going to handle running the tape backup. He may need to restart
the server every now and again. He may also need to set permissions
on files and folders from time to time. He's currently a member of
backup operators which takes care of the first two. Is server
operators a better choice? Is the ability to set ACL's something that
I can delegate?

ive him "server operators" membership and set proper ACL's on the File
system where hi has to be able to set NTFS rigths. Set neededd users
rights for him like for example "Shutdown the system" (in fact server
operators group has this right by default)

e don;t have to be a administrative user to do this tasks.