I have a temporary person that comes in once in a while to do work for us. I absolutely don't want to hand out the domain admin password, so what I do is enable an account I set up for them to use when they come in that has Domain Admin privalege - which I don't like either. When they leave I disable the account.
In order for them to be able to join (or remove) a computer from the domain what is the minimum permission that I could set up that would allow them do to this?
Any other suggestions are welcome.
Thank you.