Solved

What is the difference between the Administrators group and the Domain Admins group?

Posted on 2010-11-23
2
302 Views
Last Modified: 2012-05-10
What is the difference between the Administrators group and Domain Admins group within Active Directory 2008?
0
Comment
Question by:jdouthit
2 Comments
 
LVL 8

Assisted Solution

by:ShareefHuddle
ShareefHuddle earned 62 total points
ID: 34201496
Domain Admins

Description:
Members of this group have full control of the domain. By default, this
group is a member of the Administrators group on all domain controllers, all
domain workstations, and all domain member servers at the time they are
joined to the domain.

Administrators

Description:
Members of this group have full control of all domain controllers in the
domain. By default, the Domain Admins and Enterprise Admins groups are
members of the Administrators group.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 63 total points
ID: 34202227
There was also a really great thread on activedir a few years ago   http://www.activedir.org/ListArchives/tabid/55/forumid/1/postid/25864/view/topic/Default.aspx

when joe (listmail) and dmitri (internal MS dev) chime in on the same thread then that is a great thread :)

Like they said someone in the builtin Admin group can make themselves a DA so be careful when giving someone either of these elevated rights.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now