Why cannot I add "Administrators" (the built-in domain local group) to access network resources?

I was taught to use a Domain Local group rather than a Global group for the resources. But I just found out I was not able to apply the built-in domain local group "Administrators" onto network resources while no problem with Domain Admins (a global group). Why is that?
CastlewoodAsked:
Who is Participating?
 
Sreejith SugathanSenior Network Support EngineerCommented:
The Administrators group is a "Domain Local" and not a "Domain Global" and hence you cannot use it as a group when adding file security. On older OS like 2003 you will be able to  - but not from 2008 onwards. Will need to use the Domain Admins group instead.
0
 
CastlewoodAuthor Commented:
Got confirmed that the Built-in Domain Local groups can be applied only on the Domain Controllers. Other domain local groups than those built-in on AD are available to be applied on network resources of this domain.  

Besides, every server or workstation does have its own Built-in Administrators group, whose scope obviously is on the local computer only.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.