What is the difference between local admin and domain admin?

Under administrator account type, there can be domain administrator (an admin user that works for te entire business network) and local administrator ( admin right is only in the scope of the device itself) .

What is the difference between domain admins and administrators?

You see, the limitation is that the Domain Administrator cannot do anything outside of the domain . A Local Administrator is already outside the domain and has the full power to do anything desired on the location machine, which IS PART of the domain.

What is the difference between administrators and administrators built in?

BuiltIn\Administrators is a group you can be a member of. Administrator is a default account that comes, normally disabled, on new Windows installations .

What is the difference between global admin and domain admin?

Global administrators have access to the settings and database records for every domain configured on the server. Domain administrators can only access information regarding the domain or domains that they are specifically allowed to administer.

What's the different between builtin local/administrators and Domain Admins in AD 2003? (2024)

Article
01/04/2012

Question

_{Wednesday, January 4, 2012 4:34 AM}

What's the different between builtin local/administrators and Domain Admins in AD 2003?

I don't mean the local/administrators acount in the server but the one that we find in AD in Builin container.

All replies (13)

_{Wednesday, January 4, 2012 5:42 AM ✅Answered | 1 vote}

Built-in administrator account deals with the local machine while domain admin is with Domain. Most of the time local administrative account is required when there is network logon problem or some issue with domain admin account. so that atleast u can logon to the local server/PC and configure it.

Domain Admin is more powerful.

These are 2 groups.The "administrators" group is a local group which deals with the local machine. If you want a user to be abe to administer only his machine and no one else's, then you would place the user in the "administrators" group of that machine.

The "domain administrators" group is a global group.By default, the domain administrators global group is placed in the local "administrators" group of all computers within the domain. So, by default, domain administrators can administer any machine within the domain.

There is a local "administrators" group that is also created on all domain controller servers. If a user is placed in this group, then this user can administer any domain controller within the domain. This is because all domain controllers utilize the same security database. This user would not be allowed to administer a member server or workstation within the domain, just the domain controllers.

Refer below link for more info:
http://serverfault.com/questions/174200/domain-admins-vs-administrators-in-windows-ad-dc
http://hardforum.com/archive/index.php/t-712393.html

Hope this helps

Regards,
Sandesh Dubey.

MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator
My Blog: http://sandeshdubey.wordpress.com
This posting is provided AS IS with no warranties, and confers no rights.

_{Wednesday, January 4, 2012 6:58 AM ✅Answered}

Hi SAMATA

What's the different between builtin local/administrators and Domain Admins in AD 2003? (2024)

Question

All replies (13)

FAQs

What is the difference between local admin and domain admin? ›