Link to home
Start Free TrialLog in
Avatar of kcn
kcn

asked on

Domain administrator group add into local administrator group

As I understand , once we join a computer to domain , the domain administrator group will be added into local administrator group .

So, by then the local administrator can act as domain administrator to manage all the domain setting including domain GPO ??  Am I right ??? Please confirm .

If I am right, then the branch office administrator ( local administrator ) can "control" head office domain administrator jobs ???
Avatar of Kelden
Kelden
Flag of Germany image

No. The domain administrator is also a local admin. But the local admin is not a domain administrator. So everything is still secure.
ASKER CERTIFIED SOLUTION
Avatar of Amit Khilnaney
Amit Khilnaney
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial