Domain Admin account

[Jonathan Brown]

I have been requested to allow our network security people
to manage all accounts in the domain including the domain
admin accounts. For some reason I am unable to grant the
network security people the rights to manage the domain
admin accounts unless they are domain admin them selves.
Has any body come across this before?

Jonathan

 

[Matjaz Ladava [MVP]]

You can't change security on this accounts as AdminSDHolder automatically
resets permission on accounts that have admin privileges. See
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q318180 for
explanation.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com