I would like to set up a new domain user account in SBS2008. I need that account to only be able to access a single computer, but access that single computer as a local administrator.

I am not an IT professional, sorry if this is really simple, I am learning!

  • Have you considered not joining that computer to your Domain? Keeping it as a standalone computer?
    – user241934
    Commented Sep 11, 2014 at 13:22
  • Can I access files remotely, ie \\computername\c$ with my admin account if I don't add to domain? Commented Sep 11, 2014 at 13:35
  • 1
    Yes, if you created a local account on that computer with the same username and password as your domain admin account. However, if you changed your domain account's password, you'd have to change the password on this machine as well. VolrathTheFallen's solution is probably more suitable to your situation. Commented Sep 11, 2014 at 13:49

1 Answer 1


(I don't know about SBS2008 for sure, but I assume it will be similar to Windows Server 2008.)

In Active Directory users and computers, go into the users profile and look for the account tab. There should be a button "Log on to...". You can specify the computers the users is allowed to logon to.


Making the user a local admin must be specified on the machine itself, not the SBS.

  • Of the "Local Admin" thing could be configured in GPO... But either way, not on the SBS server.
    – Chris S
    Commented Sep 11, 2014 at 14:02

Not the answer you're looking for? Browse other questions tagged .