secure a DC in a remote locatoin

  • Thread starter Thread starter eric romero
  • Start date Start date
E

eric romero

Hi all

1 W2K-AD, 1 forest, 1tree
DCs in several cities around the world.

We have consultants out there in remote cities we have a DC in each city. We
want to know what is needed to restirct priviliges to these consultant and
at the same time allow them to perfomr daily cativities, such as backups,
password changes, review of event viewer, softwarte install in the DC. so
far they are using domain admin passwords.

Rgds,
Eric
 
None of the tasks you listed require admin access. I believe Server
Operators can install software. Backing up, resetting passwords, etc. can
all be delegated to lesser roles (backup operators, account operators, etc.)
How much software do you need to keep installing on your DC's? Take a closer
look at the pre-defined domain roles and try to give as little access as
necessary to those outside your core group of true admins.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

DC Apparently lost authentication to domain 9
Help to Find out Which W2K DC the XP client authenticate 2
Need a bit of advice 5
Local Security Policy on a DC 6
Domain migration question 1
Windows XP Clients in W2k3 AD Domain Sign on to a DC in the wrong domain 1
Remote Procedure Call Failed to Execute 2
New AD DC cannot be seen by other Domains in Forest 7

Back
Top