Administrators versus Enterprise Admins versus Domain Admins vs Schema Admins

Administrators versus Enterprise Admins versus Domain Admins vs Schema Admins

Post by Joe Murph » Tue, 02 Oct 2007 23:35:49


Wondering what the difference is between all of this groups. I am relatively
new to SBS and not sure if any of these are required or if I can consolidate
in any way.

My office is a small shop with 50+ users. Single domain/forest. Running
Exchange, SQL, AD, etc.

Thanks,
JM
 
 
 

Administrators versus Enterprise Admins versus Domain Admins vs Schema Admins

Post by mrmak » Wed, 03 Oct 2007 00:54:50

Enterprise admin is a group that has admin rights over a forest and
all domains in the forest. Since you have one domain/forest, the only
real use for this is in AD Sites and Services and AD Domains and
Trusts MMCs. Both MMCs would let you make changes that coudl affect
multiple domains if you had them.

Domain Admins are admins of a single domain by default and cannot
admind other domains unless you allow them that right.

Schema Admins is a group used to allow access to the Schema in a
Forest. The Schema controls what objects and attributes can be created
in AD. You only need to be a member of this if you are making changes
to the schema, which does not happen a lot, but would if you where
installing something like Exchange.