Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Can an OU remove the group Domain Admins from having admin rights?

0
Posted

Can an OU remove the group Domain Admins from having admin rights?

0

Every object in the Active Directory forest, including OU’s, can have explicit allow or deny permissions. The purpose of the Domain Admin account is NOT to administer the OUs but the Domain Admins permissions in order to administrate the domain, which includes setting up the department OUs. Once this is setup and delegated to the OU accounts, the permissions can be removed. If this is the situation, and there is a case where the domain admin have to make changes for the OU administrator, ownership must be assumed of the OU, and reset the permissions in order to make the changes.

Related Questions

What is your question?

*Sadly, we had to bring back ads too. Hopefully more targeted.

Experts123