Hello,
We are running windows server 2008 and i want to allow a user to perform certain tasks, like view the event viewer and add users to AD, but i dont want him to do any other function on the server.
The idea is that he connects to the server through remote desktop.
I managed to grant him rights to connect remotely with GPO, but he can not run any administrative tool because UAC request administrative credentials to run any mmc snap in.
It's possible to have this level of selective user rights through GPO, or do i have to give him global administrative rights?
Thanks in advance