Our goal is to avoid ours IT to access to any servers.
We grant them with delegation on OUs , only problem how they can add/upgrade printers and drivers on the print servers?
the second needs, It is now forbidden to use the local administrator account but for some tasks, administrators need permissions and privileges on computers. how we can give the permissions, with Active roles,without compromising security ?
thx for your help