Solved

What is the difference between the Administrators group and the Domain Admins group?

Posted on 2010-11-23
2
327 Views
Last Modified: 2012-05-10
What is the difference between the Administrators group and Domain Admins group within Active Directory 2008?
0
Comment
Question by:jdouthit
2 Comments
 
LVL 8

Assisted Solution

by:ShareefHuddle
ShareefHuddle earned 62 total points
ID: 34201496
Domain Admins

Description:
Members of this group have full control of the domain. By default, this
group is a member of the Administrators group on all domain controllers, all
domain workstations, and all domain member servers at the time they are
joined to the domain.

Administrators

Description:
Members of this group have full control of all domain controllers in the
domain. By default, the Domain Admins and Enterprise Admins groups are
members of the Administrators group.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 63 total points
ID: 34202227
There was also a really great thread on activedir a few years ago   http://www.activedir.org/ListArchives/tabid/55/forumid/1/postid/25864/view/topic/Default.aspx

when joe (listmail) and dmitri (internal MS dev) chime in on the same thread then that is a great thread :)

Like they said someone in the builtin Admin group can make themselves a DA so be careful when giving someone either of these elevated rights.
0

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question