Hello,
one company that we manage servers for decided to introduce a new player to the game for their accounting system. They´re running Windows 2k8R2 as Hyper-V Host for virtual machines, and Small Business Server 2011 as a domain controller and Exchange, they decided to create a new system running either 2k8R2/2k12 (don´t know yet), which will be joined to domain as a member server, the machine will be accessing shares on one of the virtual machines with R/W permissions, my questions is, is it possible to create administrative privileges account for that one machine only? I want them to take care of their own system, since it is running software I have no knowledge about, and I refuse to take care about their customized version of MySQL.
I thought about setting up a new admin user account in AD, and setting the LOG ON TO parameter in its properties, then create some kind of service account with standard rights which will be used for accessing shares. Is this the good approach?