Create user with limited rights for restarting server

[bnsmhe]

We want to create a user that can unlock the server and restart the server when the admin is not here.
What's the easiest why to do so, without giving the user to much access to the server?
We use W2K3 SBS.

Tnx

*************************
MCSA/MCSE 2000, MCSA 2003

 

[PoliMalaka]

Is it that you do not want this person "mucking around" on the server?
Can you trust this person to do only what you tell them to do and then only when they are told to do it?
If you have auditing turned on, you should be able to track their moves if you do not trust them.
But one of the best deterrents I have found is fear. Tell them just how closely they are monitored.
There may also be a policy in the local GPO where you can allow someone in a particular group to shut down the server.
Open the mmc and add the GPO editor snap-in. Browse to Computer Config -> Windows Settings -> Security Settings -> Local Policies -> user rights assignment.
Open the "Shut Down the System" policy and add the user or group there.

 

[PoliMalaka]

Making them only a user on the system will allow you to control what they are able to do and see.

 

[gstar1703]

Hi, not trying to hijack your thread but I have been looking for a similiar scenario above..
What happens if "serveruser1" is a domain admin for other servers on the domain, but you do not actually want them logging onto the DC itself. ie:"serveruser1" is a user which can log onto all servers (domain members) for maintenence, but you do not want them to mess with the DC...
Thanx