Win 2008 Standalone CA Domain Admin Access

[SL413]

Hi

I am planning to setup a Win 2008 Standalone CA as a member of the corporate
domain. I want to limit Domain Admin and Enterprise Admin 's login access to
the CA server. What's is the best way to achieve that??

Thanks in advance!

SL

 

[kbits.net]

Use a GPO (eg OU) to restrict access to a server
http://www.networkcomputing.com/channels/security/showArticle.jhtml?articleID=164902285

 

[Paul Adare]

I am planning to setup a Win 2008 Standalone CA as a member of the corporate
domain. I want to limit Domain Admin and Enterprise Admin 's login access to
the CA server. What's is the best way to achieve that??

If the computer is going to be a domain member then why are you deploying
it as a standalone CA?