admin groups

[Guest BuckySteven]

Hi all:

 

What is the difference of privilege between the Builtin\Administrators group

and the Domain Admin group? It confuses me all the time. What is the

difference between adding a user into Builtin\Administrators group and the

Domain Admin group?

 

I know Domain Admin group is a member of Builtin\Administrators, but it

seems the Domain Admin group has more privilege than the other one. Because

if I add a user into Builtin\Administrators, he/she can't be in the Local

Admin group, which Domain Admin group can do the trick. And what happen if I

delete the Domain Admin group in the Builtin\Administrators member list? The

Domain Admin group will not funtion well as before?

 

Last question, can I recreate a Domain Admin group which has the same

privilege after I delete the original one ?

 

Thank you for your explaination.

 

Regards