What rights does the domain admin group give you that the domain administrators group doesnt?
What is the difference between the two?
I am told there should only be two users in the domain admin group, why?
I don't think there is such a group as Domain Administrators. I think it is Domain Admin and Administrators.
A member of the Administrator group automatically has Adminstrator rights on any computer in the Domain. A member of the Domain Admins may have that right (by default Domain Admins is a member of Administrators), but they may not (if Domain Admins were to be removed from the Administrators group). A Domain Admin has full rights over the Domain, i.e. Active Directory.