We have a SBS2003 dc and are adding a Svr2003 Standard member server to

our domain. The member server will host a custom database app.

I need to allow the developer of the db app remote admin rights on the

mbr server (connecting via Remote Desktop), but exclude him from our

main server.

The connect will be through a Cisco VPN tunnel. Any guidance will be

VERY greatly appreciated.

Create a new group in the AD and name it how you like for example G_RMT_ADMIN_%SERVERNAME%

Add the G_RMT_ADMIN_%SERVERNAME% to the local administator group on the server.

By default Local administartors can log in on the server via RDP, but you can configure this via the Terminal Server Configuration tool from Start -> Settings -> Administrative Tools -> Terminal server Configuration.

Add the user to the group : G_RMT_ADMIN_%SERVERNAME%

And he will have local administrative rights on the specific server and not on the main server.

Hope it helps,

Z-Man, yer a gentleman and a scholar! Thanks much for the help.