Rudy sees and branch officers might require maintains such as updates to the wise drivers.
Additionally small branch officers might combine the roads see a role with a file server all on a single
system.
In this scenario it will be important to back up the system Rudy says support local administration by
using the administrator roles separation feature.
Will this feature you can duplicate any domain user or security group as a roadie since local administrator
without granting that user or group rights to the domain or other domain controllers.
Therefore a delegated administrator can say an intern rather see to perform maintenance work such as
upgrading a driver on a server.
However the delegated administrator can not sign into any other domain controller or perform any other
administrative tasks in the domain.
Each road is C maintains a local database of groups or users for specific administrative purposes.
You can add a demand user account to these local rules to allow support of a specific roads C you can
configure their delegated administrators for an audit.
See when you procreate and riders see computer account or when you install the road with C you can add
a user or group on the delegation of roads C installation and administration page in the Active Directory
Domain Services installation of user.
You also can add the user or group account to the managed by tab of the road DC account properties in
the Active Directory user or computers.
Please know that you can use the entity as you deal and Dia's management command line tools to configure
the delegated to rather see administrator account but it is not recommended because these tools configure
only the local or C and because this information does not display an aided s and it is harder to identify
the local administrators.
Next up we'll start a new section in which you'll be talking about implement an account security.