Admin Access to WINS

[peterve]

Hi,

I have WINS running on all of my Domain Controllers.
How can I allow a custom group of users to remotely administer WINS, without having to add them to the "server operator" protected group; or give them admin access to AD

Thanks

P

--------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------

 

[elmurado]

I think there may be two ways-one, if they use XP you can download the GPMC and let them use the WINS console on there-however, their login would need the necessary privileges.
The other way would be to give them a separate username for the management of wins and then add them to the "Allow logon through terminal services" in the default domain controller security policy. Then you could create a new group which is granted access to WINS this way. ideally, you wouldn't want anyone but domain admins/server operators etc to log onto the DC's but if you have to, you have to.
But now that i look at it I can't actually see how you can ONLY grant access to the WINS server console. Hmm....

 

[peterve]

I know... I think I'll have to move WINS to separate servers... that way I can give the user access by adding them into the Server Operators of the individual servers (instead of doing it on the DC's)

thanks

--------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------

 

[basst]

Sign on with an administrator account and create a MMC console. Add in the WINS snap-in.

Add the servers that you want the users to manage.

Save the console in user mode with limited access.

You can then distribute the MMC console to the WINS users that need to be able to manage your WINS servers.

The users can then manage WINS without having the key to the whole door.

 

[elmurado]

Yeah, I think moving it a separate server is best way to go...