Posted On: Feb 22, 2020
Difference between Enterprise and Domain Admin groups in Active Directory
Enterprise Admin: In Enterprise Admin groups, members have full rights over all of the domains in the forest. This group is also a member of the Administrators group but on all domain controllers in the forest. You need to add users with caution as they get access to the forest completely. They can force shutdown from a remote system, profile system performance, take ownership of files and much more.
Domain Admin groups: In Domain Admin groups, members have complete control of the domain. On all domain controllers, domain workstations, domain member servers, they are members of the Administrators group. An administrator account is also a member of this group. One can adjust the memory quotas for a process, manage security log, restore files and directories and can do much more.
Never Miss an Articles from us.
Explain what is Active Directory?..