Are Domain Admins as powerful as Enterprise Admins?
Hi All,
This is my first post on this message board, and I hope to learn from your input and share my admin experiences and knowledge with you all, so thank you in advance for considering my question.
I would like to know if Domain Admins are really as powerful as Enterprise Admins?
I mean I know that they are not as powerful by default, but could a Domain Admin elevate their privilege to that of an Enterprise Admin? I ask because we have multiple domains, and while we only have a few Enterprise Admins, we do have a siezable number of Domain Admins in our domains, and we often wonder if they could somehow be as powerful as us.
Good question, and I'm sure one that a lot of you have wondered about.
Let me answer your question with a question...
Q.Do you know which is the most powerful group in Active Directory?
I'll give you a hint - it is neither Domains Admins, nor Enterprise Admins.
I can answer your question in ONE minute, but I would also like to give other comrades on the forum a chance to think about this and provide their inputs.
Yes, that's exactly what I am saying - there is a group in Active Directory that is more powerful than Domain Admins and Enterprise Admins. Do you know which one it is?
