Difference between domain admin account

hi

can please explain me difference between default domain administrator account , account memeber of domain administrator groups.

is there difference or have same privilege

 

thanks

 

 

the default domain administrator member of following groups:

• administrators
• domain admins
• domain users
• enterprise admins
• group policy creator owner
• schema admins

if create user named "mrx" , let him member of domain admins group, member of following groups:

• domain admins
• domain users

(here supposed have not gave him membership other groups).

so,the difference default domain administrator member of following groups:

• administrators
• enterprise admins
• group policy creator owner
• schema admins

schema admins: designated administrators of schema

enterprise admins: designated administrators of enterprise

group policy creator owner: members in group can modify group policy domain

administrators: administrators have complete , unrestricted access computer / domain

remark: domain admins , enterprise admins group member of administrators group (by default).

so, if user member of domain admins group only, able perform administrative tasks on domain. not exemple make changes on ad schema.

 

---

posting provided "as is" no warranties or guarantees , , confers no rights.

microsoft student partner
microsoft certified professional
microsoft certified systems administrator: security
microsoft certified systems engineer: security
microsoft certified technology specialist: windows server 2008 active directory, configuration
microsoft certified technology specialist: windows server 2008 network infrastructure, c

Windows Server  >  Windows Server General Forum