<div>
If you do not trust somebody then delegate permissions accordingly for a domain user.
</div>


If you do not trust somebody then delegate permissions accordingly for a domain user.

<div>
So, you delegate this permission to add or remove a user and or group from the domain admins group to a user?
</div>


So, you delegate this permission to add or remove a user and or group from the domain admins group to a user?

<div>
<div class="content wysiwyg-content">
Hi Guys,<br />
<br />
In the domain admins group, we have the following situation:<br />
<br />
--------------------------<wbr />----------<wbr />----------<wbr />------- <br />
&lt;Individual user accounts&gt;<br />
&lt;Group accounts&gt;<br />
<br />
So, for example,<br />
<br />
--------------------------<wbr />----------<wbr />----------<wbr />------- domain admins group<br />
Bob<br />
Sue<br />
Steve<br />
Server Admins group<br />
<br />
<br />
What I want to be able to do is to restrict who can add or delete members of the domain Admins group.<br />
<br />
So, for example, is there a way to stop current members of the domain admins group from adding or deleting members of the domain admins group?<br />
<br />
What is the best way to do this?<br />
<br />
Thanks everyone.
</div>
</div>


Hi Guys,

In the domain admins group, we have the following situation:

----------------------------------------------------- 
<Individual user accounts>
<Group accounts>

So, for example,

----------------------------------------------------- domain admins group
Bob
Sue
Steve
Server Admins group


What I want to be able to do is to restrict who can add or delete members of the domain Admins group.

So, for example, is there a way to stop current members of the domain admins group from adding or deleting members of the domain admins group?

What is the best way to do this?

Thanks everyone.

Restrict who can add users to the group Domain Admins

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.