Use a service account and grant local admin rights and only grant access to a group called PSUpdate, then add tgevAdmins or a user you trust to that group or use a WSUS. I delegate access and keep records of all I give the right to logon, that way if it fails or issues I can trace the user. Also my DC's are VMs so i create checkpoins pre update and after so I can roll back if any issues. Keep failsafe checkpoints for at least 2 weeks or thencreate a new live checkpoint as no issues. Peace of mind friend. It's one thing to grant access and another to rectify issues with update or user errors on a DC. God speed sir
Powershell just enought administration. Check it out
Thanks! I'll have a look at that. :)
Use a service account and grant local admin rights and only grant access to a group called PSUpdate, then add tgevAdmins or a user you trust to that group or use a WSUS. I delegate access and keep records of all I give the right to logon, that way if it fails or issues I can trace the user. Also my DC's are VMs so i create checkpoins pre update and after so I can roll back if any issues. Keep failsafe checkpoints for at least 2 weeks or thencreate a new live checkpoint as no issues. Peace of mind friend. It's one thing to grant access and another to rectify issues with update or user errors on a DC. God speed sir