Difference between the groups 'Administrators' and 'Domain Admin'

[Harald Myklebust]

We are running a W2K domain. In AD we have a group called 'Administrators'
(Description: Administrators have complete and unrestricted access to the
computer/domain) and another called 'Domain Admin' (Description: Designated
administrators of the domain).

What is the difference between these groups?

Thanks
Harald

 

[Jerold Schulman]

We are running a W2K domain. In AD we have a group called 'Administrators'
(Description: Administrators have complete and unrestricted access to the
computer/domain) and another called 'Domain Admin' (Description: Designated
administrators of the domain).

What is the difference between these groups?

Thanks
Harald

Administrators is a local group, in this context, on the DC.
Domain Admins is a global group whose members are authorized to administer the domain. By default, the Domain Admins group is a member of the Administrators group on all computers that have joined a domain, including the domain controllers.
Domain Admins is the default owner of any object that is created by any member of the group.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com