Re: Local Admin Rights on DC

From: Steven Umbach (n9rou_at_comcast.com)
Date: 10/08/03 

Date: Wed, 08 Oct 2003 03:57:32 GMT

You are right. It actually is a built in administrator account for the domain.
It is not necessarily an enterprise administrator. The enterprise administrator
exists only in the root domain of a forest and has the distinction of being in
the administrators group of every domain in the forest. --- Steve

"Rick Thomas" <richardthomas0@yahoo.com> wrote in message
news:Xns940DD113D2A64TheRockWI@24.94.170.87...
> Actually that is not a local admin account, that would be the Domain
> Admin. In the AD this is the Enterprise admin account, which holds all
> the keys to the castle... Not the account you want to load computers
> with.
>
> Actually you cannot set local admin access on a domain controller. You
> must do this at the actual computer using the true local administrator
> account and log in to the computer with the machine as the domain...
>
> "Steven L Umbach" <n9rou@comcast.net> wrote in
> news:RH3db.436594$cF.139623@rwcrnsc53:
>
> > There is the built in administrator account on the domain controller
> > that should suffice for anything like that. It is a very powerful
> > account and should not be used by anybody not trusted to do
> > administrative tasks in the domain as it is also all powerful in the
> > domain. --- Steve
> >
> > "Dayne" <jake@nospam-please.com> wrote in message
> > news:048a01c38451$7f21e110$a301280a@phx.gbl...
> >> I have an application that needs local admin rights on a
> >> computer to load. It has to be a local admin but can not
> >> be a domain admin.
> >>
> >> How do I set the account as a local admin on the Domain
> >> Controller?
> >
> >
> >
>

Relevant Pages
Quantcast