in a single out of the box Windows 2003 AD Domain (no root or child
domains), I noticed that domain admins can freely add themlselves into
the enterprise admin groups.
is this normal ? Actually, in a forest made of a single domain, where's
the difference between enterprise and domain admins ?
Re: Should be a simple task ...Domain Admins from the parent domain was empty. ... no administrative rights on the parent domain) administrators of their child... At this point, I've added them to the child domain's Administrators group,... > The domain admins group is a global group and ... (microsoft.public.windows.server.active_directory)
Re: Enterprise Admins in Child Dc ...Domain Admins Group on Child DC is a Global Group-it can ... >The enterprise admins in the forest root domain should ... (microsoft.public.win2000.active_directory)
Re: Certificate Templates Issue ... I created one subordinate CA in one of my child domain......windows 2003. ... When the domain Admins wanter to enroll a Web server using ... On the Certificate template he only get one template which is the ... (microsoft.public.windows.server.active_directory)
Re: smtp AD site Link versus IP AD Site Link ...Assuming replication is fine, add the member that is an EA to the (child)... EA only gives you so many permissions; domain admins is what gives you ... now with SMTP replication is OK but when i try logging in with enterprise admin account i failed with an error stating that "Access is denied" thus preventing me from changing any setting that need enterprise admin rights like DNS, exchange, ... (microsoft.public.win2000.active_directory)
