+ Post New Thread
Results 1 to 12 of 12
How do you do....it? Thread, Assistant Network Managers admin rights. in Technical; After xmas we will have a assistant NM starting. For the first month or two while they settle in i ...
  1. #1
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Assistant Network Managers admin rights.

    After xmas we will have a assistant NM starting. For the first month or two while they settle in i dont really want them to have full admin rights on the domain.

    What do you think are apropriate rights for them while they settle in and get used to our network.

    Back Up Operaters
    Remote Desktop users

    Waht sort of righ tfor basic Active Directory right. i.e just changing password passwords etc


    What would you recommend.?

  2. #2

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,066
    Thank Post
    629
    Thanked 2,232 Times in 1,020 Posts
    Blog Entries
    23
    Rep Power
    638

    Re: Assistant Network Managers admin rights.

    Create user accounts and create computer accounts would be handy.

  3. #3
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,988
    Thank Post
    120
    Thanked 283 Times in 261 Posts
    Rep Power
    107

    Re: Assistant Network Managers admin rights.

    Yes limited to begin with definately. You dont want what happened to ICT NUT where his Technician thought it would be a good idea to put everyone in the Domain Administrators group

  4. #4
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Assistant Network Managers admin rights.

    But what group membership should i give them

  5. #5
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,988
    Thank Post
    120
    Thanked 283 Times in 261 Posts
    Rep Power
    107

    Re: Assistant Network Managers admin rights.

    Just leave them as a normal user and use the delegation wizard to give them rights to reset passwords etc. Then maybe after a bit make a group and stick that in the local administrators group on your workstations and put him in it.

  6. #6

    Join Date
    Jul 2005
    Location
    Corby
    Posts
    1,056
    Thank Post
    12
    Thanked 20 Times in 18 Posts
    Rep Power
    24

    Re: Assistant Network Managers admin rights.

    Delegation of authority over an OU is a good start- give them change password for users rights, and printers too (like you said). I wouldn't (personally) make them part of backup operators until and unless they understand your backup system- it's too critical for the "have a go" types you can get (like me then ;-)

    Have fun!

    Paul

  7. #7

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,807
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Assistant Network Managers admin rights.

    I'd make them two accounts. Their normal user account with normal 'staff' priverlege levels and an 'administration' account with some of the priverleges the others have mentioned above. Get him into the good habit of logining into his normal 'staff' account and only using his 'admin' account when he needs to. I'd suggest some forced wallpaper settings to remind him which account he's in as too. Even better explain how 'runas' and friends work so he doesn't have to keep logging in/out.

  8. #8

    Join Date
    Jul 2005
    Location
    Derby
    Posts
    118
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    26

    Re: Assistant Network Managers admin rights.

    I found that using a normal user account for day to day stuff was fine, both for myself ,the ICT Technician and Help Desk Advisor.

    The only extra priviledges any of us had (we all belonged to a help desk group) was that we could create/modify user accounts.

    To do any work on the server, we simply Remote Desktop'd into the server with the administrator account. Only I, as the network manager, needed this account. After about a year, the ICT technician became quite confident with the network and I knew I could trust him with the administrator password.

    It all depends how you run your technical support department. Structure is important, as well as clearly defined roles.

    For a really, really good guide to running technical support in schools, have a look at FITS: www.becta.org.uk/fits

  9. #9
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 45 Times in 35 Posts
    Rep Power
    29

    Re: Assistant Network Managers admin rights.

    delegation wizard
    whaaa???

    wheres that? That sounds good - will it modify an existing user? I wouldnt mind altering the ICT Co-Ord's rights with that

    Maybe that will save him logging on as me [administrator] 8O

    Cheers
    Nath

  10. #10

    Join Date
    Jul 2005
    Location
    Derby
    Posts
    118
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    26

    Re: Assistant Network Managers admin rights.

    Right click on an OU in group policy and its there (top of the list, if I remember correctly).

    As a general rule, its better to apply any kind of changes to a group, then just add people to that group. If the person with elevated permissions leaves or changes position in the school its easier to change them back to a normal user again and give them to another user. This is true with file permissions also. (Apart from the home directory of course).

    -Kev

  11. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,807
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Assistant Network Managers admin rights.

    I tend to discourage use of the 'Administrator' account. Seperate per user admin accounts leads to a bit more accountability.

  12. #12
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 45 Times in 35 Posts
    Rep Power
    29

    Re: Assistant Network Managers admin rights.

    True, but its rare that the ICT Co-ord uses Administrator - usually only when i'm not in school... if he has to lol

    And as he rarely remembers the password, its no real problem

    But i do see your point - I might make a new user for him to use when he needs to do anything admin

    Cheers
    N.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 11
    Last Post: 20th February 2008, 10:14 AM
  2. How do I give admin rights to teacher laptop
    By SimpleSi in forum Windows
    Replies: 15
    Last Post: 25th September 2007, 12:57 PM
  3. grant temp admin rights
    By mtupker in forum Scripts
    Replies: 17
    Last Post: 8th September 2007, 07:55 PM
  4. Connection Fails Without Admin Rights
    By MrDylan in forum ICT KS3 SATS Tests
    Replies: 8
    Last Post: 12th May 2006, 12:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •