Hello, in order to resolve your issue you need to follow the following steps:
In this case I leave you two options depending on your demand
1. Create the user in Active Directory
Example:soporte.local
2. Add as local administrator only on certain PCs
-Manually when there are few computers
On each PC:
Administración de equipos > Usuarios y grupos locales > Grupos > Administradores
→ AddDOMINIO\soporte.local
-With GPO (many computers)
Create a GPO that applies only to the staff computers you need
Route:
Configuración del equipo > Preferencias > Configuración de Windows > Grupos locales
Action: Update
Group: Administrators (integrated)
Member:DOMINIO\soporte.local
This way you will have an administration dedicated only to the computers you want without having to change the other systems.
All the best
Google Translation (Red + italic)
Hello, in order to resolve your issue you need to follow the following steps:
In this case I leave you two options depending on your demand
1. Create the user in Active Directory
Example:soporte.local
2. Add as local administrator only on certain PCs
-Manually when there are few computers
On each PC:
Administración de equipos > Usuarios y grupos locales > Grupos > Administradores
→ AddDOMINIO\soporte.local
-With GPO (many computers)
Create a GPO that applies only to the staff computers you need
Route:
Configuración del equipo > Preferencias > Configuración de Windows > Grupos locales
Action: Update
Group: Administrators (integrated)
Member:DOMINIO\soporte.local
This way you will have an administration dedicated only to the computers you want without having to change the other systems.
All the best
Quiero reforzar la seguridad del dominio estableciendo políticas de contraseña (mínimo de caracteres, caducidad, historial, complejidad, etc.).
¿Desde qué parte del servidor se gestiona esto? ¿Cómo se verifica que está aplicándose correctamente?