Re: enterprise admins and domain admins

Tech-Archive recommends: Fix windows errors by optimizing your registry



use the restricted groups feature within a GPO

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"whoolly" <whoolly@xxxxxxxxx> wrote in message
news:1150829854.447537.305960@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,
I have a forest, with mutliple sub-domains.
I am a member of the enterprise admins group on the root domain.
How can I put myself into the domain admins group in the sub-domains?
If I go into the domain admins group - it will not let me add users
from another domain.
I want to be able to log in with my account in the root domain, and
have full admin to whatever machine that I am on in any of the
sub-domains.
Please let me know.
Thanx,



.



Relevant Pages

  • Re: need to modify local group membership via VBscript
    ... sure that the domain admins group is a member of the local admins group on ... the workstation. ... ' Bind to Domain Admins group with WinNT provider. ... On Error GoTo 0 ...
    (microsoft.public.windows.server.scripting)
  • Re: need to modify local group membership via VBscript
    ... sure that the domain admins group is a member of the local admins group on ... the workstation. ... ' Bind to Domain Admins group with WinNT provider. ... On Error GoTo 0 ...
    (microsoft.public.windows.server.scripting)
  • Re: Restrict managing AD ojects
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... * This posting is provided "AS IS" with no warranties and confers no rights! ...
    (microsoft.public.windows.server.active_directory)
  • Re: W2K Pro Local Admins
    ... > having Domain Admins group in the Local Administrators ... If you can't trust the people that are placed in the Domain Admins group, ... Administration scripting examples and an ONLINE version of the 1328 page ...
    (microsoft.public.win2000.security)
  • Question for WinInstall customers
    ... Apparently the WinInstall documentation recommends using an account with ... Domain Admins group membership for software distribution. ... specific AD user account or global group. ...
    (microsoft.public.win2000.security)