1
00:00:06,420 --> 00:00:14,320
Rudy sees and branch officers might require maintains such as updates to the wise drivers.

2
00:00:14,650 --> 00:00:23,590
Additionally small branch officers might combine the roads see a role with a file server all on a single

3
00:00:23,590 --> 00:00:24,570
system.

4
00:00:24,580 --> 00:00:33,250
In this scenario it will be important to back up the system Rudy says support local administration by

5
00:00:33,250 --> 00:00:38,000
using the administrator roles separation feature.

6
00:00:38,020 --> 00:00:46,420
Will this feature you can duplicate any domain user or security group as a roadie since local administrator

7
00:00:46,720 --> 00:00:53,730
without granting that user or group rights to the domain or other domain controllers.

8
00:00:53,770 --> 00:01:01,780
Therefore a delegated administrator can say an intern rather see to perform maintenance work such as

9
00:01:01,780 --> 00:01:04,060
upgrading a driver on a server.

10
00:01:04,240 --> 00:01:13,240
However the delegated administrator can not sign into any other domain controller or perform any other

11
00:01:13,240 --> 00:01:16,210
administrative tasks in the domain.

12
00:01:16,210 --> 00:01:24,640
Each road is C maintains a local database of groups or users for specific administrative purposes.

13
00:01:24,640 --> 00:01:33,370
You can add a demand user account to these local rules to allow support of a specific roads C you can

14
00:01:33,370 --> 00:01:37,250
configure their delegated administrators for an audit.

15
00:01:37,260 --> 00:01:45,250
See when you procreate and riders see computer account or when you install the road with C you can add

16
00:01:45,280 --> 00:01:54,610
a user or group on the delegation of roads C installation and administration page in the Active Directory

17
00:01:54,610 --> 00:01:57,270
Domain Services installation of user.

18
00:01:57,280 --> 00:02:07,150
You also can add the user or group account to the managed by tab of the road DC account properties in

19
00:02:07,150 --> 00:02:10,470
the Active Directory user or computers.

20
00:02:10,540 --> 00:02:18,610
Please know that you can use the entity as you deal and Dia's management command line tools to configure

21
00:02:18,610 --> 00:02:26,110
the delegated to rather see administrator account but it is not recommended because these tools configure

22
00:02:26,110 --> 00:02:35,920
only the local or C and because this information does not display an aided s and it is harder to identify

23
00:02:35,920 --> 00:02:37,780
the local administrators.

24
00:02:37,780 --> 00:02:44,260
Next up we'll start a new section in which you'll be talking about implement an account security.