Server Operators Builtin group

[TheLad]

Guys

If someone is a Member of the Builtin\Server Operators group, does that allow them to perform limited Administrative tasks on all of the servers within AD or is it just the Domain Controllers?

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[ncotton]

Server Operators is a local group that allows a user to perform general administrator tasks. These tasks include sharing server resources, performing file backup and recovery, and more. As with other operator accounts, Server Operators can also log on to a server locally and shut it down. Server Operators can perform most common server administration tasks

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[TheLad]

Yes I found that too. But what I was wondering was whether the Builtin\Server Operators group only applied to Domain Controllers as the Member Servers have their own local Server Operators groups...

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[ncotton]

It sort of only applied to the server, it is a local group to. The same as that of the member servers.

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[markdmac]

Adding a member of Server Operators allows a user to manage any servers, not just DCs.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[ncotton]

Mark, isn't that through the delegation of the Domain Administrators group being a local admin group?

Hope this Helps.

Neil J Cotton
njc Information Systems
Systems Consultant

 

[markdmac]

Neil, I am not following your question. Adding a user to the Server Operators group will allow them to manage a server but not give them access to manage AD.

Typically this right is assigned for Admins who need to be able to mange backups (can also be a backup administrator) but may also need to be able to manage event logs, update drivers and printers etc.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[TheLad]

So that is what the local Server Operators group does for each server, so does that have the same effect for the Built in AD group Server Operators with all servers or just Domain Controllers?

--------------------------------------
"Insert funny comment in here!"
--------------------------------------

 

[markdmac]

Same thing but you only need to add once rather than for each server.

A server is a server be it a DC or not. The Server Operators will not however have rights to administer AD even if logged onto a DC.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript