I would say you are going to have very little luck doing this. Our solution is to demote DC's when local site folks need to deal with hardware issues or we delete the machine from AD and let the site reload it.
joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Morley, Scott Sent: Thursday, December 04, 2003 2:26 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Delegate Access for DC servers (2003) All, I am challenged with providing a level of access to Domain Controllers that would allow individuals to access the OS and fix any hardware issues, but not impact Active Directory (2003). Any thoughts or articles that anyone can point my way? Scott Morley MCSE 2000/4.0, Exchange 2000/5.5, MCT, CCNA, CNE, CNI Senior Systems Engineer/Architect Global Messaging Services, Starwood Technology Center Starwood Hotels and Resorts, Worldwide Phone: 781-348-7120 Learning is not compulsory... neither is survival. - W. Edwards Deming This electronic message transmission contains information from the Company that may be proprietary, confidential and/or privileged. The information is intended only for the use of the individual(s) or entity named above. If you are not the intended recipient, be aware that any disclosure, copying or distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify the sender immediately by replying to the address listed in the "From:" field. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
