DEV Server Least Privilege for Administrators

Question

I'm aware that "Least Privilege" and "Administrator" are oxymoron-ish, but I want to allow certain users Admin server access EXCEPT to run services using their own account.
What are the settings to apply?
Thanks

Answer 1

Hi，

but I want to allow certain users Admin server access EXCEPT to run services using their own account.

I'm not clear about your requirements in the above description.

Do you want the user to use the common user account to manage certain services instead of Administrator account?

If so, as far as I know, some service has its management group, like DNS service, Hyper V service, etc, we may add the user account to the certain group to manage the service.

Thanks for your time!
Best Regards,
Anne

-----------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Thank you, XiaoweiHe.

Clarification:

On the server, I need to prevent a user to be able to set up a service to run under his/her credentials , like

The user would have to use, for example, contoso\ServiceDuplicati, or request someone with the ability to do so review and configure .