Enterprise Admins Rights

[Nigel Benton]

We have a 2k native domain that consists of an empty root domain & two child
domains.

We currently have several user accounts that are memmbers of the root
domains enterprise admins group & we wish to reduce that number.

Is there a definitive list anywhere of tasks that require enterprise admin
rights to be able to perform them such as ...

Adding child domains
Authorizing DHCP servers in child / root domain ?
Transfering roles in child / root domain ?
etc,etc

Thanks,

Nigel Benton.

 

[Herb Martin]

I don't know of a definitive list but we could probably make one by
challenging the experts here to "think of another", so here's a start:

Add/Remove Domains & Trees to Forest
Add to Schema Admins (and thereby indirectly edit schema)
Setup Sites and Services Configuration (Site, Subnets, Site Links, etc)
Authorize DHCP & RIS servers
Manage Schema/Domain Naming Master Roles?

(Domain admin stuff of course)

There must be more but that's just a quick list.

 

[Nigel Benton]

In our test setup I've created a child domain and set up sites & subnets
without any problems using an account with domain admin rights in our root
domain ?

I did require enterprise admin when trying to authorize a dhcp server in the
child domain.

Haven't tried the other tasks yet.