Multiple Domain Admins with One domain controller

Posted on 2007-10-10
Last Modified: 2008-05-31
We have an outfit in Canada and head office in US, Canadian office has few users and we would like to have an  admin at that location. Since we remotely do everything, it is coming to the point that we need a service personal there. We have one Windows 2003 domain controller (A/D)and would like to create two domain admins. Is this possible.
Question by:rexyphilips
    LVL 48

    Expert Comment

    you cannot have two domains on one server, what you want to do, is have two domain controllers replicating, and then delegate rights to the remote admin on his OU
    LVL 2

    Expert Comment

    If you want to designate a second user as a domain administrator, yes, that's possible. Just make whichever user you want to be the additional admin a member of the Domain Admins group.
    LVL 48

    Expert Comment

    jeez i misread that question something chronic...missed the admin bit :)

    still, delegation is much much more secure that having two domain admins

    Author Comment

    Hi Jay, in todays world of centralization and virtulization, I was hoping that Windows  2008 would be able to administer a Junior Admin. I do understand that OU can be made, but they  will stumble on issues.

    As my question was pertaining to WIndows 2003, the answer seems to be No, correct?
    LVL 48

    Accepted Solution

    2003 will allow you to have as many domain admins as you want, however, that is an unpleasant risk.....your delegation of control is ideal for the junior admin role, its pretty much designed for that, it lets you control completely what they can and cannot do....other than that you have security groups and policies and thats about it :) 2008 wont change any of those basic prinicples either - i think if you look at the wizard, you will be pleasantly surprised

    apologies on the misread initially too.....made me look like as classy as a goose

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now