Difference between the groups 'Administrators' and 'Domain Admin'

  • Thread starter Thread starter Harald Myklebust
  • Start date Start date
H

Harald Myklebust

We are running a W2K domain. In AD we have a group called 'Administrators'
(Description: Administrators have complete and unrestricted access to the
computer/domain) and another called 'Domain Admin' (Description: Designated
administrators of the domain).

What is the difference between these groups?

Thanks
Harald
 
We are running a W2K domain. In AD we have a group called 'Administrators'
(Description: Administrators have complete and unrestricted access to the
computer/domain) and another called 'Domain Admin' (Description: Designated
administrators of the domain).

What is the difference between these groups?

Thanks
Harald
Click to expand...
Administrators is a local group, in this context, on the DC.
Domain Admins is a global group whose members are authorized to administer the domain. By default, the Domain Admins group is a member of the Administrators group on all computers that have joined a domain, including the domain controllers.
Domain Admins is the default owner of any object that is created by any member of the group.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Back
Top