cancel
Showing results for 
Search instead for 
Did you mean: 

Domain Admin Privileges when using Active Directory as an Authentication Server

Highlighted
New Contributor

Domain Admin Privileges when using Active Directory as an Authentication Server

Dear friends,

in short: why are domain admin privileges or at least delegated privileges needed?

https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40401
4 REPLIES 4
Highlighted
New Contributor

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

Is the delegate control needed the active directory authentication server is configured as a ldap server?
Highlighted
New Contributor

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

Is the delegate control needed if the active directory authentication server is configured as a ldap server?
Highlighted
Moderator

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

They are required by MS to complete the join process, change the machine password, proxy user authentication, and search the directory.
Highlighted
Moderator

Re: Domain Admin Privileges when using Active Directory as an Authentication Server

No; the user can be simply an admin
It is theoretically possible to configure the LDAP server admin with a standard user account that is able to query the directory