difference between Admnistrator accounts

  • Thread starter Thread starter cosimo
  • Start date Start date
C

cosimo

I'have not understood the difference between
the "Administrator" account member of Administrators built-
in group and any account created in the DomainAdmins
global security group.
In other words the rights and privileges of accounts in
the DomainAdmins group are the same than the
Administrators account?
Thanks you.
Cosimo MERCURO
 
Domain Admins is a global group, so it can be added to Administrators local
group on every computer in your domain (this way domain admins have
administrative privileges on every PC in the domain). Administrators group
on DC is a domain local group. This group can not be added to loacl
Administrators group on PC's in your comain. This is just following AGDLP
rule (Accounts --> Global Groups --> domain local groups <-- permissions)

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 
Back
Top