Not sure if this is the best way to achieve this but here is the background and the goal.
BACKGROUND We are a small business. Sometimes myself or the other person who is capable of dealing with an email outage is not available.... Usually it is as simple as restarting the old and tired out exchange box to bring it back online... this is obviously a temporary fix till I can get to the cause of the particular outage. But the idea is to limit the downtime caused by this to our call center.
GOAL: I want to setup a one time use Admin account. OR write a scrip that allows the user to simply restart the server.
Understand this users current account is limited to just a domain user not an admin of any type.
Additional Information Idea with a one time use account is the user can use it once. Log in make changes and once they are done and logged out the account is then locked out or has its password change or is disabled. Anything to stop them from using it a second time. This way there is some accountability to the user to use it only for emergencies and for its intended purpose and not as a easy way to adjust their limited account or install software among other things.
As for the script I understand that due to the limited permission on standard users this user would be unable using their current permission to do a PSSHUTDOWN.EXE on the exchange box remotely. So we would have to come up with a good method in order to allow the user to do a restart. Should be a simple VB script which is not the issue. My issue is creating some form of security allowing them to type in just maybe a password to have the process commence. Bonus points if you can include stopping of services in the script. things like I can fill in the others once I see how you implement the first one. net stop "Microsoft Exchange Information Store"
I feel the second plan seems a lot safer. This way I can just use security by obscurity. Not tell him the RDP port and not have him actually on the system but more so just using a password to activate the restart.
So assistance in this is greatly appreciated. Or alternative suggestions are always welcome.