Regarding Enterprise Admin Group

PAUL CHONG CHUANG YONG 120

User's image

Hi All,

I have scenario like upper draft for my customer, customer asking is that have anyway let have one of the AD account in Root domain have Administrator right to all domain in the forest, I do found seem like enterprise Admin group in Root domain can be make it. But when testing only have the administrator right in child domain DC but not in the PC. And Ext domain not able have the administrator right for that, is that I have make any mistake or other? Need help to clarify this.

Regard,

Paul

1 answer

Daisy Zhou 24,666 Reputation points Microsoft Vendor

2024-07-10T08:48:19.8933333+00:00

Hello PAUL CHONG CHUANG YONG,

Thank you for posting in Q&A forum.

You can try to add the Administrator or Administrators group or Enterprise Admin group in root domain to Root domain PC and Child Domain and Child Domain PC and Ext Domain and Ext Domain PC.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Please sign in to rate this answer.
PAUL CHONG CHUANG YONG 120 Reputation points

2024-07-15T01:04:48.46+00:00

Hi Daisy,

I can't add the AD account from root domain to child domain and Ext domain.

Regard,

Paul

PAUL CHONG CHUANG YONG 120 Reputation points

2024-07-15T01:06:18.0166667+00:00

Hi Daisy,

I can't add the AD account from Root Domain to child domain and ext domain.

Regard,

Pauk

Daisy Zhou 24,666 Reputation points Microsoft Vendor

2024-07-16T11:36:44.38+00:00

Hello

Good day!

On child domain controller, you can try:

Best Regards,
Daisy Zhou

PAUL CHONG CHUANG YONG 120 Reputation points

2024-07-18T01:39:59.9733333+00:00

Hi Daisy,

For your description I assign Root Domain AD account to child domain and ext domain administrators group, but child domain and ext domain end user computer still not able using that AD account have the administrator right. What you mean I need to manual assign(or via GPO) to every end user computer local administrators group?

Regard,

Paul

Daisy Zhou 24,666 Reputation points Microsoft Vendor

2024-07-24T07:35:36.0566667+00:00

Hello
Good day!

For Child Domain and Ext Domain, you can add it as the screenshot above.

What you mean I need to manual assign(or via GPO) to every end user computer local administrators group?

A: For Root Domain PCs, Child Domain PCs and Ext Domain PCs, yes, I mean that.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Regarding Enterprise Admin Group

1 answer

Your answer