Which Account permission to grant

[Antonia]

I have two AD server, I have the control of the main AD server and the other
AD server is sitting at the branch office connected via site to site VPN.
Since I am the enterpise domain admin, I have the control of everything.

both domain is "abc.com" level, there is no sub domain.

Since I have another domain on my branch office that is not in my country. I
intend to creae a aacount with minimum right for the remote branch
administrator just to shutdown and backup the server data if necessary. I do
not intend to give any higer right that may compromise my AD security.

Which is the best account typr I shoould give or is theer any registry that
or GPO that I can modify an account to give the require right

 

[Florian Frommherz [MVP]]

Antonia,

I have two AD server, I have the control of the main AD server and the other
AD server is sitting at the branch office connected via site to site VPN.
Since I am the enterpise domain admin, I have the control of everything.

both domain is "abc.com" level, there is no sub domain.

Since I have another domain on my branch office that is not in my country. I
intend to creae a aacount with minimum right for the remote branch
administrator just to shutdown and backup the server data if necessary. I do
not intend to give any higer right that may compromise my AD security.

Which is the best account typr I shoould give or is theer any registry that
or GPO that I can modify an account to give the require right

see if the Server Operators group fits your needs:
http://technet2.microsoft.com/windo...ef34-4f77-9c2e-94a62f8846cf1033.mspx?mfr=true

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Use a newsreader! http://www.frickelsoft.net/news.html
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste