Avoid Dom Admin to remove Enterprise admin

From: Vicente Rodriguez (vicente.rodriguez@gedas.es)
Date: 06/12/02 

From: "Vicente Rodriguez" <vicente.rodriguez@gedas.es>
Date: Wed, 12 Jun 2002 05:30:29 -0700

Hi,
I need to force that Domain Admins from child domain are
not able to remove Enterprise admins from the
Administrators group. I can't find any solution on the
technet or on MS web page.
Please, can anyone help me? any clue?

Relevant Pages

  • Re: Accessing c$ share in child domain
    ... We are currently running in mixed mode, am I correct in thinking that ... Enterprise Admins were automatically domain admins within all child ... >Check the membership in the local administrators group on the ...
    (microsoft.public.win2000.security)
  • Re: Confused
    ... Administrators group so they are administrators of the child domain, ... By default the Domain Admins of a domain are member of the ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain Admin cant log into child domains
    ... Domain Admins can only log into their own domain in the ... Enterprise Admins are granted wide-spread rights ... Administrators in the child domain can log onto any ... physically sitting at the console) using their parent domain credentials ...
    (microsoft.public.security)
  • Re: Listing user privileges
    ... So the service works is Domain Admin, running on a member, ... Domain Admins group resolves the issue, and I'm suspecting (but not yet ... confirmed) that being a member of the Administrators group for the domain ... are the privilege differences between those two groups, ...
    (microsoft.public.windows.server.security)
  • Re: XP Default user profile vs 2000
    ... Domain Admins group but only the domain-level Administrators group. ... User profile on the W2K domain. ... the same admin rights that I have on the domain would automatically override ...
    (microsoft.public.windowsxp.security_admin)