Todays job is locking down security.
The company that created our main application keeps the servers it runs on maintained and up to date, so they need to have full admin access to the 3 servers it runs off.
Now they connect to us using our Citrix system and up until now they have had Domain admin status. I know this shouldnt be done, but we have a very good relationship with them.
So today I figured I would remove their domain admin status and make it so they are admins of the 3 servers they need to be, therefore limiting what they have access to.
I would normally sort this out by going to the machine they will be working on and adding the user id to the Local Administrators group, however when I go into control panel on the servers they do not have a "useres and computers" option.
So my question is, how can I make them admin of the 3 servers and not have access anywhere else on the network?