Ask the Expert

Roaming the system with domain rights but no edit rights

Is there a way to get up an account that can roam the system with Domain Admin rights but NOT be allowed to change anything? We have recently outsourced and we wish to be able to check on what is happening on the system without being accused of 'meddling' with the system.

Requires Free Membership to View

Create a new account, then assign or delegate to it only the read rights over all the AD containers and objects. This is done through Active Directory Users and Computers.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in December 2004

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: