Home All Groups Group Topic Archive Search About

Win 2008 Standalone CA Domain Admin Access

Author
17 Oct 2008 12:52 PM
SL413
Hi

I am planning to setup a Win 2008 Standalone CA as a member of the corporate
domain.  I want to limit Domain Admin and Enterprise Admin 's login access to
the CA server.  What's is the best way to achieve that??

Thanks in advance!

SL

Author
11 Nov 2008 3:58 PM
kbits.net
Use a GPO (eg OU) to restrict access to a server. http://www.networkcomputing.com/channels/security/showArticle.jhtml?articleID=164902285

Show quoteHide quote
"SL413" wrote:

> Hi
>
> I am planning to setup a Win 2008 Standalone CA as a member of the corporate
> domain.  I want to limit Domain Admin and Enterprise Admin 's login access to
> the CA server.  What's is the best way to achieve that??
>
> Thanks in advance!
>
> SL
>
Author
11 Nov 2008 9:47 PM
Paul Adare
On Fri, 17 Oct 2008 05:52:01 -0700, SL413 wrote:

> I am planning to setup a Win 2008 Standalone CA as a member of the corporate
> domain.  I want to limit Domain Admin and Enterprise Admin 's login access to
> the CA server.  What's is the best way to achieve that??

If the computer is going to be a domain member then why are you deploying
it as a standalone CA?

--
Paul Adare
MVP - Identity Lifecycle Manager
http://www.identit.ca