Domain Admins vs Admins - Hsanokklis/2023-2024-Tech-journal GitHub Wiki

While I have been completing my labs I have run into issues in which I am prompted to input my domain admin credentials. This was surprising to me since I thought I made a domain admin (han.san-adm) by adding the user to the Administrator group. Once I learned that Domain Administrator was a group I could join users to, I went back and changed my user to that group and all my issues with the admin credentials went away.

You see the main difference between a Domain Admin and an Local Admin is that the domain admin cannot do anything outside of the domain. The local admin is already outside the domain and has full power to do anything desired on the location machine, which is PART Of the domain.

Local Admin

  • Had the permission to anything, but is restricted to one machine.

Domain Admin

  • A user authorized to make changes to global policies that impact all the computers and users connected to that AD organization.

image

Links:

https://www.trinustech.com/blog/theres-admin-and-theres-admin-domain-administrators-vs-local-administrators/#:~:text=You%20see%2C%20the%20limitation%20is,IS%20PART%20of%20the%20domain.