Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

administrator and administrators OU's in AD? What are there roles?

Posted on 2004-10-06
8
Medium Priority
?
328 Views
Last Modified: 2010-04-19
I am reading through my administrators guide to windows 2003 and in the "active directory objects" it goes over the different roles, domain admins, domain guests etc.

I noticed it has an "Administrator" and an "Administrators" group. What is the difference? Is one a local admin acccount giving full control on the computer locally and the other a server admin account?

Please explain.
Thanks
0
Comment
Question by:georgecooldude
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
8 Comments
 
LVL 16

Accepted Solution

by:
JamesDS earned 80 total points
ID: 12236682
georgecooldude

The ADMINISTRATOR User account is the primary account for administering the domain.

The ADMINSTRATORS group is a group of users that CAN administer the domain - you can add any user account to this group that you wish to use as an administrator account.

So, if more than one person needs to administer the domain, you add them to the GROUP. If only one person needs the rights, then they could just use the USER account.

Cheers

JamesDS
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12237116
ok thanks!

There are 3 of us who I would like to be administrators. I'll ass us all to the administrators group. I assume this means I don't need to do anything to the Administrator user
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 12237187
georgecooldude
Yup, exactly right.

Store the password for the Administrator account in a safe place, just in case you need it.

Cheers

JamesDS
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 5

Author Comment

by:georgecooldude
ID: 12237374
Thanks JamesDS,

With this account  do I also have control locally on the computer I logged in with?

I tryed something similar before but was unable to change such settings as the system time.

I know with NT server if you were a member of the administrators group you could do what you liked. It seems and i may be wrong here but to adjust settings locally on computers I have to setup a local administer account on the computer and cannot use my account on the windows 2003 server to adjust things specific to the local computer. Is there a way around this as I dont have time to create local admin accounts on our 100 or so PC's.
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 12237416
georgecooldude

The Local Machine is not same security boundary as the Domain.

Make the "Domain Admins" group a member of the local Administrators group on the workstation and then join your administrative user account to the Domain Admins group.

Cheers

JamesDS
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12237598
"Make the "Domain Admins" group a member of the local Administrators group on the workstation"

Where can this be done on a windows XP Pro machine? I am logged in under a windows NT server administrator account. Should I log in as the local administrator account?
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12237652
ok i think i found it.

Its in control panel, then users, and then I click the advanced tab and then the advanced management option. I then get a new box pop up with:

Local users and groups.
 - users
 - groups

I guess I should add the domain admins to the "groups" bit then. :-)
0
 
LVL 5

Author Comment

by:georgecooldude
ID: 12239056
Ah, I've found my answer. :)
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Video by: ITPro.TV
In this episode Don builds upon the troubleshooting techniques by demonstrating how to properly monitor a vSphere deployment to detect problems before they occur. He begins the show using tools found within the vSphere suite as ends the show demonst…
In this video, Percona Solution Engineer Rick Golba discuss how (and why) you implement high availability in a database environment. To discuss how Percona Consulting can help with your design and architecture needs for your database and infrastr…
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question