Domain Admin Account

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

If I have a domain with child domains and I give a user domain admin rights
to the top level domain, will that Domain admin have domain admin rights to
the chid domains.

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Not by default, but they will be able to give themselves domain admin rights
in the child domain. Domain admins in the root domain can add themselves to
the Enterprise admins group and so gain access throughout the forest.

"keberso" <keberso@discussions.microsoft.com> wrote in message
news:27A75B5A-3DB5-415C-994F-79899B908417@microsoft.com...
> If I have a domain with child domains and I give a user domain admin
> rights
> to the top level domain, will that Domain admin have domain admin rights
> to
> the chid domains.