Conventional scripts typically execute under the security context of the user logging on. Unless users are made administrators of their own machines, the ability to perform administrative tasks through a centralized logon script will be limited to each user's rights on their computer.
The DA Administrative service enables Desktop Authority to perform tasks that require administrative rights without sacrificing user-level security at the workstation. This service helps Desktop Authority perform these specialized tasks by installing a client version of the DA Administrative service to each client machine and a complementary version of the DA Administrative service to one or more Domain Controllers within the domain.
This service requires two unique user accounts. The Server user account is used on each server to remotely install the Desktop Authority Administrative Client Service on each workstation. Therefore, the Server user account (server side service) must have Local Admin rights to all workstations. In most circumstances, this account will be one that is a member of the Domain Admins group.
The Client User account (client side service) is used on each workstation to make registry changes, install software, add printers, synchronize time and perform any other task that may require elevated privileges during the logon, logoff or shutdown events. The Client user account should be a member of the Domain Users group.
Installing this service to all domain controllers is the preferred action for this service and provides the best configuration for load balancing.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
