I have a small Windows-based network in our company, incl. a Win2008 server as domain controller and a second, older Win2003 server as kind of "backup" domain controller. Now I want to let one of my co-worker access the Win2003 server, incl. local admin priviledges.
However, this account should only get local admin rights on that server, nothing else. So I basically want to prevent this account from accessing or at least modifying any Windows Domain settings (Active Directory). Nor should he be able to log into any other machine except this old server. He must be able to (de-)install programs and start/stop services on that though.
Any way to do this? Thanks in advance for your help!
Kind regards, Matthias