Windows 2008 domain controller

-

dear all,

we have windows 2008 server domain controller . it's working fine . have more group 1 of group name it. group have around 15 members . members support branches system . remote support . branches support engg . time doing install new software or hardware . change ip address form branches pc. here come point .

all users , branches pc's member of domain controller. our branches support engg asking permission per change ip , install software , remotely log-in branches servers. permission can give them above purpose ?

advance

subash 


hi suriya,

you can make them member of local administrator group on clients, , workstation pc's allow them install software , change ip address configuration on client machines.

if want them change ip address related configuration can add them to network configuration operators group.

to this:

control panel > administrative tools > computer managment > local users , groups > groups > network configuration operators > (right click) add group 

you can achieve using restricted groups in group policy.

step step:
http://www.windowsecurity.com/articles/using-restricted-groups.html

florian's blog » how use restricted groups? part i
www.frickelsoft.net/blog/?p=13

description of group policy restricted groups
support.microsoft.com/kb/279301

for remote logon permission branch servers - 

need add user “remote desktop users” group. adding user remote desktop users group gives them “remote logon” rights machine remote desktop users group part of gpo “allow logon through terminal services”.

more info:
http://blogs.technet.com/b/askperf/archive/2011/09/09/allow-logon-through-terminal-services-group-policy-and-remote-desktop-users-group.aspx


regards,
rafic

if found post helpful, please give "helpful" vote.
if answered question, remember mark "answer".
posting provided "as is" no warranties , confers no rights! test suggestion in test environment before implementing!



Windows Server  >  Windows Server General Forum



Comments

Post a Comment

Popular posts from this blog

List Styles

-
in word 2010, defined new list style called “custom1′ “new docs based on template” instead of “this doc only.” heading 1, 2, 3, etc. appear linked within document. document create list style called “custom2′ , choose make available “new docs based on template” , also link them heading styles. though both list styles show available new docs, 1 of list styles (the last 1 used) linked heading styles. in word's default list library, multiple multi-level lists appear be linked heading styles. not able link heading styles multiple custom list styles? a particular list style can have 1 set of paragraph styles associated (one style each numbering level). the list formats in so-called list library behave differently, have noticed. similar predefined formats in bullets , numbering dialog box of word 97-2003. stefan blom, microsoft word mvp ...
Read more

for loop and start-job from cmd.exe

-
hello, i have simple script developed debug purposes: $serverlist = @( "sca-c1cor01", "scb-c1cor01" ) ($i=0; $i -lt $serverlist.length; $i++) { start-job -scriptblock {$x=0} } i have saved script off file called test.ps1.  when run ./test.ps1 within interactive powershell runs fine.  i trying to call script dos window, sql server agent command job, or start->run line.  here syntax using: cmd.exe /c powershell -nologo -noninteractive "c:\scripts\powershell\test.ps1" when run way (from dos window), diaglog box pops says: powershell has stopped working  problem caused program stop working correctly.  windows close program , notify if solution available. i close , open eventvwr.msc.  2 pieces of info.  1 application , services log (windows powershell): engine state changed available stopped. details:  newenginestate=stopped  previousenginestate...
Read more

The Windows Management Instrumentation (WMI) service cannot be started . Failed

-
i started trubleshoting microsoft windows [version 10.0.10586] (c) 2015 microsoft corporation. rights reserved. c:\windows\system32>regsvr32 [/u] [/s] <ocx file name> syntax of command incorrect. c:\windows\system32>run /n regsvr32 /s msmapi32.ocx 'run' not recognized internal or external command, operable program or batch file. c:\windows\system32>cmd /k sc qc winmgmt [sc] queryserviceconfig success service_name: winmgmt         type               : 20  win32_share_process         start_type         : 2   auto_start         error_control      : 0   ignore         binary_path_name   : c:\windows\system32\svchost.exe -k netsvcs...
Read more