User AD and limited priviliges

[Iwawa]

Hello,
In an infrastructure I have two domain controllers Windows 2016 and other servers used for example for business accounting, rather than for the document storage or human resources or various services such backup, antivirus, etc.
I would to know if it is possible to create an AD user necessarily with administrative privileges who can, however, access only one of these servers (e.g. the HR server), preventing him from accessing all the others, including the DCs.
Can anyone help me?
Thank You and Best Regards

 

[Neemobeer]

For better account management, create an AD group like "Server A Admins" or "<Function Name> Admins"
Assign that group on the server in the administrators group. Add whichever accounts need that access to the created group.