Explain the difference between Enterprise and Domain Admin groups in Active Directory?

devquora
devquora

Posted On: Feb 22, 2020

 

Difference between Enterprise and Domain Admin groups in Active Directory

Enterprise Admin: In Enterprise Admin groups, members have full rights over all of the domains in the forest. This group is also a member of the Administrators group but on all domain controllers in the forest. You need to add users with caution as they get access to the forest completely. They can force shutdown from a remote system, profile system performance, take ownership of files and much more.

Domain Admin groups: In Domain Admin groups, members have complete control of the domain. On all domain controllers, domain workstations, domain member servers, they are members of the Administrators group. An administrator account is also a member of this group. One can adjust the memory quotas for a process, manage security log, restore files and directories and can do much more.

    Related Questions

    Please Login or Register to leave a response.

    Related Questions