I have a Windows Server 2008 AD domain
, with 2 domain controllers, one with Windows Server 2008
, the other with Windows Server 2008 R2
. The second is the main DC.
I'd like to create a user who is a local administrator
of the first domain controller (windows server 2008
), but cannot access, for example, the shared folder of the other domain controller, or use the account to log in with mstsc on another member of the DC, so it hasn't to be a domain administrator
.
Is this possible?