Accessing WSUS admin console without Domain admins

[maxrebo]

I`m tightening our (Techs) admin privileges on our accounts so have taken Domain Admins away, (and just use a domain admin account when required) can anyone tell me what permissions we need to access WSUS Admin console and AD Admin Console remotely?.

I've given us WSUS Administrators but that doesn't seem to let us in.

[bknaggs]

I think you need to be a local admin on the server itself for WSUS.

 

For AD I think you’re looking at delegating permissions.

 

Not near a PC at the moment so can’t check.

Edited March 2, 2018 by bknaggs

[maxrebo]

Just added them to these this morning and all working fine cheers