Is it possible to give a Windows Domain User account administrator rights on a single server? We have a vendor installing software and they are requiring domain administrator access to the machine.
If it's a member server, you can add them to local administrator group:
- (2003) http://technet.microsoft.com/en-us/library/cc739265%28v=WS.10%29.aspx
- (2008) http://technet.microsoft.com/en-us/library/cc772524.aspx
This won't work if it's a domain controller though -- there are no local accounts. You'd need to run the installer as a different user or temporarily elevate their account.