Re: Accessing c$ share in child domain

From: Stephen Pettitt (xxx_at_none.com)
Date: 12/18/03 

Date: Thu, 18 Dec 2003 13:02:48 +0000

We are currently running in mixed mode, am I correct in thinking that
this will only be possible in native mode? We would like to add the
Enterprise Admins to the Domain Admins group on all child domain but
this doesn't appear to be possible at the moment. I had assumed that
Enterprise Admins were automatically domain admins within all child
domains, this is wrong I suppose?

Thanks for your help,

Stephen.

On Mon, 15 Dec 2003 19:22:38 GMT, dweiss@online.microsoft.com (Dale
Weiss (MSFT)) wrote:

>Hello,
>
>Check the membership in the local administrators group on the
>servers/workstations that are affected. IIRC the Enterprise Administrators
>may be able to administer DC's but not member servers and workstations.
>
>You will need to access them with an account that is in the local
>administrators group on those systems.
>
>Dale Weiss MCSA MCSE CISSP
>PSS Security
>
>This posting is provided "AS IS" with no warranties, and confers no rights.
>Any opinions or policies stated within are my own and do not necessarily
>constitute those of my employer. Use of included script samples are subject
>to the terms
>specified at http://www.microsoft.com/info/cpyright.htm
>
>

Relevant Pages

  • Avoid Dom Admin to remove Enterprise admin
    ... I need to force that Domain Admins from child domain are ... not able to remove Enterprise admins from the ... Administrators group. ...
    (microsoft.public.win2000.security)
  • Re: Listing user privileges
    ... So the service works is Domain Admin, running on a member, ... Domain Admins group resolves the issue, and I'm suspecting (but not yet ... confirmed) that being a member of the Administrators group for the domain ... are the privilege differences between those two groups, ...
    (microsoft.public.windows.server.security)
  • Re: XP Default user profile vs 2000
    ... Domain Admins group but only the domain-level Administrators group. ... User profile on the W2K domain. ... the same admin rights that I have on the domain would automatically override ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Listing user privileges
    ... that Domain Admins (therefore AD controller ... Administrators group) has no advanced privileges on a member server other ...
    (microsoft.public.windows.server.security)
  • Re: Listing user privileges
    ... Administrators group of domain is used only on the DCs. ... Domain Admins is member in Administrators group of each ... Administrators group) has no advanced privileges on a member server other ...
    (microsoft.public.windows.server.security)