Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to setup a security policy and am a bit stuck - and wonder whether anyone can help me. I've got 2 questions that I can't seem to find the answers to.

  1. Is it possible to set up a master system administrator account under a Windows Server OS that is protected from interference by other system administrators?

  2. Is there a way to set up an user with all privileges necessary to maintain a system under Windows server except the ability to set up and modify usercodes and passwords?

I've tried searching on the internet for hours, but keep getting responses for Server Administrator jobs - and can't seem to pinpoint any specific answer. Thanks so much for your help.

share|improve this question

migrated from Apr 12 '11 at 20:41

This question came from our site for professional and enthusiast programmers.

Yes to both, but it would be an extraordinary amount of work. In general don't give people admin privileges unless they absolutely need them and you can absolutely trust them.

You can do things like make people administrators over certain groups of computers fairly easily by putting them in a new group (Call it SubAdmins of XYZ), then using a GPO to add SubAdmins of XYZ to the Local Admin group of those computers.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.