Restricting admin users depend on operational system

Question

Hello people,

I want to create an admin user who can just configure Windows 8 computers in the domain. How can i do this in Windows Server 2022?

Thanks in advance..

Answer 1

Hello Zafer Yegin

To create an admin user who can configure Windows 8 computers in the domain using Windows Server 2022, you can follow these steps:

Log in to the Windows Server 2022 domain controller with administrative privileges.

Open "Server Manager" from the taskbar or from the Start menu.

In Server Manager, click on "Tools" in the top-right corner and select "Active Directory Users and Computers" from the dropdown menu.

In the Active Directory Users and Computers (ADUC) console, navigate to the desired Organizational Unit (OU) where you want to create the admin user. Right-click on the OU and select "New" > "User."

In the "New Object - User" wizard, provide the necessary information for the new admin user. This includes the First name, Last name, User logon name (e.g., adminuser), and a strong password. Ensure the "User cannot change password" and "Password never expires" options are unchecked.

Click "Next" and then "Finish" to create the new user account.

Now, you need to grant administrative privileges to the user to allow them to configure Windows 8 computers:

a. Go back to the ADUC console and locate the newly created admin user in the OU.

b. Right-click on the admin user and select "Properties."

c. In the Properties window, go to the "Member Of" tab.

d. Click on the "Add" button and type "Administrators" in the "Enter the object names to select" field.

e. Click "Check Names" to validate the group name, and then click "OK" to add the user to the Administrators group.

Now, the admin user has administrative privileges on the domain-joined Windows 8 computers, and they can configure those computers as needed.

Remember to adhere to best practices for user security, such as providing the least privilege necessary for the admin user and regularly reviewing their permissions. Additionally, ensure that the admin user's password is strong and protected to maintain the security of the domain and the Windows 8 computers.