Standalone CA Logical Control

[Guest SL413]

Hi

 

I am planning to setup a Win 2008 Standalone CA. I want to limit Domain

Admin and Enterprise Admin 's login access to the CA server. What's is the

best way to achieve that??

 

Thanks in advance!

 

SL

[Guest Bill Grant]

Re: Standalone CA Logical Control

 

 

 

"SL413" <SL413@discussions.microsoft.com> wrote in message

news:797428D2-27D2-4D68-BDA7-8F48F07BA5B3@microsoft.com...

> Hi

>

> I am planning to setup a Win 2008 Standalone CA. I want to limit Domain

> Admin and Enterprise Admin 's login access to the CA server. What's is

> the

> best way to achieve that??

>

> Thanks in advance!

>

> SL

 

I don't see what you want to know. By definition a standalone CA is

independent of Active Directory. A Domain or Enterprise Admin account has no

meaning outside of AD. Login access would be to the server's local account

database, not the AD database.

[Guest SL413]

Re: Standalone CA Logical Control

 

However, the Standalone CA has to be a member of the corporate domain.

 

 

"Bill Grant" wrote:

>

>

> "SL413" <SL413@discussions.microsoft.com> wrote in message

> news:797428D2-27D2-4D68-BDA7-8F48F07BA5B3@microsoft.com...

> > Hi

> >

> > I am planning to setup a Win 2008 Standalone CA. I want to limit Domain

> > Admin and Enterprise Admin 's login access to the CA server. What's is

> > the

> > best way to achieve that??

> >

> > Thanks in advance!

> >

> > SL

>

> I don't see what you want to know. By definition a standalone CA is

> independent of Active Directory. A Domain or Enterprise Admin account has no

> meaning outside of AD. Login access would be to the server's local account

> database, not the AD database.

>

>

>