ACTIVE DIRECTORY Questions and Answers

What is the difference between domain admin groups and enterprise admins group in AD?

 Enterprise Admin Group             Domain Admin Group
  • Members of this group have complete control of all domains in the forest
  • By default, this group belongs to the administrators group on all domain controllers in the forest
  • As such this group has full control of the forest, add users with caution
  •  Members of this group have complete control of the domain
  • By default, this group is a member of the administrators group on all domain controllers, workstations and member servers at the time they are linked to the domain
  • As such the group has full control in the domain, add users with caution