Security Question about SMS and Domain Admins

[AricBaker]

Due to security, it has become necessary for us to remove the Domain-Admins group from the local administrators group on several machines that are members of our domain (hmm.. I guess that is kind of redundant isn't it? If they weren't domain memebers, the domain-admins group wouldn't be in the local administrators group.. anyway..)

Our SMS guy has complained that SMS won't work correctly for the next push of software if we don't put the domain-admins back in the local administrators group.

Since he also claimed that our NAV servers wouldn't be able to update the NAV clients unless we put them back, and we KNOW that to be false, we where wondering if he was being 100% correct in his reasoning.

Does SMS require the Domain Admins to be in the Local administrators group? Can SMS be used on machines that aren't on the domain?

Can anyone please help?

Aric

 

[sambusa]

hi brother;
actually u want to remove the domain admin account from the machine , ( i think any user has't admin perm in any machine when they log locally ).. for that reson the sms will not install on the client ..so if the user hasn't admin per on the machine u have to create account and add it to the domain admin globale group to success the installation process .


the next point u say can install the sms on the client that's not belong to the domain ?
if it's on another domain u can by use so many teqn..

if there ae any idea from any one, or correction pls sub..

with my best wishes
sambusa