• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 75
  • Last Modified:

Why cannot I add "Administrators" (the built-in domain local group) to access network resources?

I was taught to use a Domain Local group rather than a Global group for the resources. But I just found out I was not able to apply the built-in domain local group "Administrators" onto network resources while no problem with Domain Admins (a global group). Why is that?
0
Castlewood
Asked:
Castlewood
1 Solution
 
Sreejith SugathanSenior Network Support EngineerCommented:
The Administrators group is a "Domain Local" and not a "Domain Global" and hence you cannot use it as a group when adding file security. On older OS like 2003 you will be able to  - but not from 2008 onwards. Will need to use the Domain Admins group instead.
0
 
CastlewoodAuthor Commented:
Got confirmed that the Built-in Domain Local groups can be applied only on the Domain Controllers. Other domain local groups than those built-in on AD are available to be applied on network resources of this domain.  

Besides, every server or workstation does have its own Built-in Administrators group, whose scope obviously is on the local computer only.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Easily Design & Build Your Next Website

Squarespace’s all-in-one platform gives you everything you need to express yourself creatively online, whether it is with a domain, website, or online store. Get started with your free trial today, and when ready, take 10% off your first purchase with offer code 'EXPERTS'.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now