The MMC Plugin should work with an user who has only local Administrator rights to his Workstation and not Domain Administrator rights.
The settings are stored in the registry for the logged in user. The MMC plugin does NOT write any information to the Active Directory, so no additional rights are necessary.
Most of the companies greater than 100 employees have graduated administrator rights. It can be a security risk, to give all of the it-staff domain administrator rights.
Additional, each admin user who will use the plugin has to set his user name and password in the mmc plugin configuration. Each time the user has to change his password in the Active Directory, he had to change this password in the plugin configuration too.
Andreas
by: Andreas K. | over a year ago | Administration
Comments
= The mmc plugin should use the credentials of the current user. The permissions of this user to AD and Groupwise should be placed in their configuration tools such mmc and gw amdin console - nowhere else.
I just ran into this issue today with one of my large 5,500 user customers that stated, No Way will I have my Help Desk people be a member of the MS AD Domain Admin Group to run the GW 2014 MMC Plug-in.
This has to be fixed ASAP.