|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
difference in groupsWhat is the difference in the administrators and domain admins built in
group in AD? Is there any good articles on delegation, not the best practices guide. I need something usefull to help me pitch the idea of doing this. Administrators is a built-in group. This can be thought of as a local
group, except that local, when considered on DCs, covers all DCs. It's not a local group, but from an abstract level they function the same. Domain Admins is a global group that is automatically added to the administrators group of every domain member. So, Domain Admins is a member of administrators on a DC (which means it has full control over the domain NC) and on workstations and member servers. Re. delegation info. The best practices whitepaper and the appendixes are the best places to start. I know there's a lot to read, but you can skim it and then write your proposal on this. -- Paul Williams Microsoft MVP - Windows Server - Directory Services http://www.msresource.net | http://forums.msresource.net |
|||||||||||||||||||||||
Other interesting topics