Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

What is the difference between the Administrators group and the Domain Admins group?

Posted on 2010-11-23
2
Medium Priority
?
347 Views
Last Modified: 2012-05-10
What is the difference between the Administrators group and Domain Admins group within Active Directory 2008?
0
Comment
Question by:jdouthit
2 Comments
 
LVL 8

Assisted Solution

by:ShareefHuddle
ShareefHuddle earned 248 total points
ID: 34201496
Domain Admins

Description:
Members of this group have full control of the domain. By default, this
group is a member of the Administrators group on all domain controllers, all
domain workstations, and all domain member servers at the time they are
joined to the domain.

Administrators

Description:
Members of this group have full control of all domain controllers in the
domain. By default, the Domain Admins and Enterprise Admins groups are
members of the Administrators group.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 252 total points
ID: 34202227
There was also a really great thread on activedir a few years ago   http://www.activedir.org/ListArchives/tabid/55/forumid/1/postid/25864/view/topic/Default.aspx

when joe (listmail) and dmitri (internal MS dev) chime in on the same thread then that is a great thread :)

Like they said someone in the builtin Admin group can make themselves a DA so be careful when giving someone either of these elevated rights.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
A bad practice commonly found during an account life cycle is to set its password to an initial, insecure password. The Password Reset Tool was developed to make the password reset process easier and more secure.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

926 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question