Creating a Workstation only Administrator
ID: Q125782
|
The information in this article applies to:
-
Microsoft Windows NT operating system version 3.1
-
Microsoft Windows NT Advanced Server version 3.1
-
Microsoft Windows NT Workstation versions 3.5, 3.51, 4.0
-
Microsoft Windows NT Server versions 3.5, 3.51, 4.0
To add a pseudo-administrative account to a domain to allow a user to
administer and maintain Windows NT workstations but not servers:
- On one of the servers in the domain:
a. Start User Manager for Domains.
b. Create a new global group (for example, WKSADMIN).
c. Add the pseudo-administrator user to the group.
- On the all workstations in the domain:
a. Start User Manager.
b. Add the new global group to the workstation's local administrator
group.
This gives the pseudo-administrator administrative rights on the
workstations in the domain but not the servers.
Once you add the new global group to all workstation's local administrator
group, you can add additional workstation administrators by adding them to
the global group on the server.
If you want the pseudo-administrators to have limited administrative
capabilities on the domain servers, add them to the Server Operators group
on a server in the domain. This allows them to shut down the server, share
and stop sharing directories, and backup and restore files. It does not
allow them to change any user attributes, add drivers, or take ownership of
files.
Additional query words:
admin limited prodnt
Keywords : kbnetwork ntdomain ntsecurity nthowto NTSrvWkst
Version : 3.1 3.5 4.0
Platform : winnt
Issue type :
Last Reviewed: February 23, 1999