Domain admins

whats the best way of restricting membership of the dom ads group?.
ideally i would like just the enterprise admins group to be allowed to
change membership of the DA group.

has anybdy actually done this using restricted group? and does it
work ?

dave

.