I have a SBS 2003 running AD, DNS, Exchange etc.... this is a manufacturing environment that runs 24 x 7 seven days a week. Very seldom but we do experience a Server lockup and need to reboot the server. Currently only one person is server admin and knows the administrator login name and password. Of course this causes headaches if a lockup occurs in the middle of the night when there is no server admin in the building. Owner does not want anybody else to have Domain Admin login name and password for security reasons.
So here is my question ?
Is there a way to setup a user account that can logon locally at the server that will have enough rights assigned to it so everything will still function properly like backups etc... but be limited so they do not have full domain administrator rights. This way we can assign a night server admin that can reboot the server and logon with this account without having to worry about that account having too many rights that they can get carried away and do damage if they ever so desired. I have done some research on enabling local login on the server but i am not sure how to setup the user account to have the correct set of rights and groups it needs to belong to etc... Should i create a new user group and assign it certain levels / rights ?
Thanks for any help that can be offered