Enterprise Admin Issue

[Chris]

When installing SMS we noticed that on certain machines
the Enterprise Admin did not have admin rights to the
workstations. We would go and manually add the enterprise
admin to the admin group of the workstation, but on
others we did not have to do this.

Anyone know why some workstations had to have the
enterprise admin manually entered as an admin???

 

[Steven L Umbach]

By default the domain admins global group is added to the local administrators group
of W2K domain computers and not the enterprise admins group. Possibly somebody added
the enterprise admins to those computers ? I would not recommend that enterprise
administrators be used to manage domain members anyhow as that is the most powerful
group in the domain and should be used only when needed - not for everyday activities
which could open users in that group to risk of password capture on non secured
workstations/servers. -- Steve