Solved

What is the difference between the Administrators group and the Domain Admins group?

Posted on 2010-11-23
2
322 Views
Last Modified: 2012-05-10
What is the difference between the Administrators group and Domain Admins group within Active Directory 2008?
0
Comment
Question by:jdouthit
2 Comments
 
LVL 8

Assisted Solution

by:ShareefHuddle
ShareefHuddle earned 62 total points
ID: 34201496
Domain Admins

Description:
Members of this group have full control of the domain. By default, this
group is a member of the Administrators group on all domain controllers, all
domain workstations, and all domain member servers at the time they are
joined to the domain.

Administrators

Description:
Members of this group have full control of all domain controllers in the
domain. By default, the Domain Admins and Enterprise Admins groups are
members of the Administrators group.
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 63 total points
ID: 34202227
There was also a really great thread on activedir a few years ago   http://www.activedir.org/ListArchives/tabid/55/forumid/1/postid/25864/view/topic/Default.aspx

when joe (listmail) and dmitri (internal MS dev) chime in on the same thread then that is a great thread :)

Like they said someone in the builtin Admin group can make themselves a DA so be careful when giving someone either of these elevated rights.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

822 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question