Prevent Domain Admins From Modifying Domain Admins Group

I am looking for a way to prevent Domain Admins from adding to the Domain Admins and Administrators Groups iin one of our Child Domains.

I only want Enterprise Admins to be able to add to this Group

I have given certain users "Delegative Access", but some users have to be Domain Admins

Whats is the best way to do this.
Who is Participating?
Haresh NikumbhConnect With a Mentor Sr. Tech leadCommented:
Domain admin.

Members of this group have full control of the domain. By default, this group is a member of the Administrators group on all domain controllers, all domain workstations, and all domain member servers at the time they are joined to the domain. By default, the Administrator account is a member of this group. Because the group has full control in the domain, add users with caution.

so i dont think so you can stop them, the  only option is create another group and give as per your required rights and add those members in that group.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.