Guest SL413 Posted October 16, 2008 Posted October 16, 2008 Hi I am planning to setup a Win 2008 Standalone CA. I want to limit Domain Admin and Enterprise Admin 's login access to the CA server. What's is the best way to achieve that?? Thanks in advance! SL
Guest Bill Grant Posted October 16, 2008 Posted October 16, 2008 Re: Standalone CA Logical Control "SL413" <SL413@discussions.microsoft.com> wrote in message news:797428D2-27D2-4D68-BDA7-8F48F07BA5B3@microsoft.com... > Hi > > I am planning to setup a Win 2008 Standalone CA. I want to limit Domain > Admin and Enterprise Admin 's login access to the CA server. What's is > the > best way to achieve that?? > > Thanks in advance! > > SL I don't see what you want to know. By definition a standalone CA is independent of Active Directory. A Domain or Enterprise Admin account has no meaning outside of AD. Login access would be to the server's local account database, not the AD database.
Guest SL413 Posted October 16, 2008 Posted October 16, 2008 Re: Standalone CA Logical Control However, the Standalone CA has to be a member of the corporate domain. "Bill Grant" wrote: > > > "SL413" <SL413@discussions.microsoft.com> wrote in message > news:797428D2-27D2-4D68-BDA7-8F48F07BA5B3@microsoft.com... > > Hi > > > > I am planning to setup a Win 2008 Standalone CA. I want to limit Domain > > Admin and Enterprise Admin 's login access to the CA server. What's is > > the > > best way to achieve that?? > > > > Thanks in advance! > > > > SL > > I don't see what you want to know. By definition a standalone CA is > independent of Active Directory. A Domain or Enterprise Admin account has no > meaning outside of AD. Login access would be to the server's local account > database, not the AD database. > > >
Recommended Posts