• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 74
  • Last Modified:

Why cannot I add "Administrators" (the built-in domain local group) to access network resources?

I was taught to use a Domain Local group rather than a Global group for the resources. But I just found out I was not able to apply the built-in domain local group "Administrators" onto network resources while no problem with Domain Admins (a global group). Why is that?
0
Castlewood
Asked:
Castlewood
1 Solution
 
Sreejith SugathanSenior Network Support EngineerCommented:
The Administrators group is a "Domain Local" and not a "Domain Global" and hence you cannot use it as a group when adding file security. On older OS like 2003 you will be able to  - but not from 2008 onwards. Will need to use the Domain Admins group instead.
0
 
CastlewoodAuthor Commented:
Got confirmed that the Built-in Domain Local groups can be applied only on the Domain Controllers. Other domain local groups than those built-in on AD are available to be applied on network resources of this domain.  

Besides, every server or workstation does have its own Built-in Administrators group, whose scope obviously is on the local computer only.
0

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now