Re: Domian local group versus Domain admin group

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 08/28/05 

Date: Sat, 27 Aug 2005 19:27:44 -0700

Domain Local is a type of group, not a group itself.
Domain local groups can contain members from other domains.
Domain global groups by contrast can only contain as members
objects that are defined in the group's domain.

Domain admins is a group. It is a domain global group. By
default Domain Admins is a member in the Administrators group
on every machine in its domain (this is changable). 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Darren" <Darren@somewhere.com> wrote in message
news:ujged1xqFHA.3660@TK2MSFTNGP15.phx.gbl...
> what are the diffrences amoung groups Domain Local and Domain Admin..
>
> Thanks
> Darren
>
>

Relevant Pages

  • Re: Domian local group versus Domain admin group
    ... Just want to make sure I understand the diffrences. ... > Domain local groups can contain members from other domains. ... > Domain global groups by contrast can only contain as members ... > default Domain Admins is a member in the Administrators group ...
    (microsoft.public.win2000.security)
  • Re: Domain Admin Access across Trusted domains
    ... > users to a Domain Local security group, I can't add that Domain Local ... Much, not all, can be conferred my making members of the ... same as making them members of Domain Admins. ... >>> The trust is a two way external trust. ...
    (microsoft.public.win2000.security)
  • Re: SQL Domain Group Permissions
    ... Most settings can be retrieved by any authenticated user. ... the group "Domain Admins" is added to the local ... Administrators group with the computer is joined to the domain. ... members of Domain Admins to retrieve more information on the computers. ...
    (microsoft.public.sqlserver.security)
  • Re: Finding users of a specific group and listing memberships of t
    ... report generated by the system that lists members of the Domain Admin group. ... Dim strGroupDN, objGroup, objMember, objMemberGroup, objFileSystem, ... >> Hi...I am trying to write a script that will list users of a specific ... >> Domain Admins group, I want it to list all those users group memberships. ...
    (microsoft.public.windows.server.scripting)
  • Re: Restricting access to AD located in another domain
    ... you should use the Delegation Wizard ... I am not so sure that granting the Help Desk ... If they need to be members of the local Administrators on all of the WIN2000 ... HelpDesk security group and the Domain Admins. ...
    (microsoft.public.win2000.active_directory)