difference between Admnistrator accounts

  • Thread starter Thread starter cosimo
  • Start date Start date
C

cosimo

I'have not understood the difference between
the "Administrator" account member of Administrators built-
in group and any account created in the DomainAdmins
global security group.
In other words the rights and privileges of accounts in
the DomainAdmins group are the same than the
Administrators account?
Thanks you.
Cosimo MERCURO
 
Domain Admins is a global group, so it can be added to Administrators local
group on every computer in your domain (this way domain admins have
administrative privileges on every PC in the domain). Administrators group
on DC is a domain local group. This group can not be added to loacl
Administrators group on PC's in your comain. This is just following AGDLP
rule (Accounts --> Global Groups --> domain local groups <-- permissions)

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Can i use the Group Domainadmins for two Domains? 1
XP Pro - Account Unknown... but not really 2
Cannot see AD 1
user rights and privileges in Windows 2000 domain 2
Prevent some Domain Admin Account from creating USERS, Groups, OUs 2
Domain admin has lost administrative rights 6
domain admin rights keep changing on workstations 3
Password Export error ADMT 3 1

Back
Top