Built-In Administrators vs. Domain Admins

[Guest]

What is the different between these groups? They appear to be the same? Do people who need to administer the domain need to be in both groups? Is group membership cumulative or does one outweigh the other? Any explanation will be appreciated. Thanks!

 

[Guest]

I did some research and it appears that if you are a member of the Built-In Administrator Group that you can administer the DC's only. It also appears that if you are a member of the Domain Admin Group (in Users Container), then you can administer the member servers and PC's, but not the DC's (unless the Domain Admin Group is a member of the Built-in Administrator Group). Is this analysis correct?

 

[Dan DeStefano]

members of the domain admins group have administrative privileges on all
domain objects, including domain controllers.

Dan

I did some research and it appears that if you are a member of the

Built-In Administrator Group that you can administer the DC's only. It also
appears that if you are a member of the Domain Admin Group (in Users
Container), then you can administer the member servers and PC's, but not the
DC's (unless the Domain Admin Group is a member of the Built-in
Administrator Group). Is this analysis correct?

 

[Kathy L]

Thanks for the info. Is it true, though, that the Built-
In Administrators Group can only administer the DC's and
nothing else?