Enterprise admins are designated for the entire forest and domain admins are for specific domain only.
Enterprise Admins are the only group which can perform changes which relate directly to the forest and not an individual domain; there are very few of these tasks. For instance, Forest Prep for R2 or Exchange would need to be done by an Enterprise Admin. Creation of trust relationships between forests. Modifying the values of some object attributes/properties in AD. Creation of Terminal Services Licensing for the whole forest. Destruction of a child Domain or an entire forest. As a rule, if the Change you are planning to make would affect more than an individual domain, you will need Enterprise Admin access - and sometimes you may need Schema Admin access in addition to that.
Enterprise Admins are the only group which can perform changes which relate directly to the forest and not an individual domain; there are very few of these tasks. For instance, Forest Prep for R2 or Exchange would need to be done by an Enterprise Admin. Creation of trust relationships between forests. Modifying the values of some object attributes/properties in AD. Creation of Terminal Services Licensing for the whole forest. Destruction of a child Domain or an entire forest. As a rule, if the Change you are planning to make would affect more than an individual domain, you will need Enterprise Admin access - and sometimes you may need Schema Admin access in addition to that.
No comments:
Post a Comment