Discussion:
Delegate User Access to radius server on domain controller
(too old to reply)
Joe
2007-04-17 13:38:01 UTC
Permalink
Greetings all,

I would like to give a Cisco Engineer access to our Radius server. The
problem is the Radius server is on a Domain Controller. How can give him
access only to the Radius server without giving him full admin rights?

Thank you in Advance
Joe
Keshav
2007-04-17 14:16:06 UTC
Permalink
What type of access you wish to give to the Cisco engineer? Delegation of
Administration?
Post by Joe
Greetings all,
I would like to give a Cisco Engineer access to our Radius server. The
problem is the Radius server is on a Domain Controller. How can give him
access only to the Radius server without giving him full admin rights?
Thank you in Advance
Joe
Joe
2007-04-17 14:34:00 UTC
Permalink
I would just like for him to manage the Radius portion of the server. He
wants to give specific rights to the Cisco equipment using role based
policies utilizing radius.

Let me know if you need more info.

Thanks
Joe
Post by Keshav
What type of access you wish to give to the Cisco engineer? Delegation of
Administration?
Post by Joe
Greetings all,
I would like to give a Cisco Engineer access to our Radius server. The
problem is the Radius server is on a Domain Controller. How can give him
access only to the Radius server without giving him full admin rights?
Thank you in Advance
Joe
Keshav
2007-04-17 15:02:05 UTC
Permalink
Complete separation of IAS administration from local server Administrators is
not possible. Most of the IAS adminsitration tasks requires Local Admin
rights. Because you have configured IAS on a Domain Controller, there would
not be a possibility to delegate him with local admin rights. Please refer to
the below link. The link is not directly relevent to this topic, but there is
some useful information regarding delegation of IAS tasks:

http://www.microsoft.com/technet/security/prodtech/windowsserver2003/pkiwire/PGCH05.mspx?mfr=true
Post by Joe
I would just like for him to manage the Radius portion of the server. He
wants to give specific rights to the Cisco equipment using role based
policies utilizing radius.
Let me know if you need more info.
Thanks
Joe
Post by Keshav
What type of access you wish to give to the Cisco engineer? Delegation of
Administration?
Post by Joe
Greetings all,
I would like to give a Cisco Engineer access to our Radius server. The
problem is the Radius server is on a Domain Controller. How can give him
access only to the Radius server without giving him full admin rights?
Thank you in Advance
Joe
Loading...