The one group that has global control over all users, groups, and computers in a single domain is the Domain Admins group.
该组可以全权管理单独域中的所有用户、组以及电脑。
This user account must be a member of the Domain Admins group and all other groups that you can see starting with Domain.
这个用户帐户必须是Domain admins组和所有以domain开头的其他组的成员。
This provides granular control over all Active Directory functions, without giving away too much power like the Domain Admins group does.
该委任对所有的ActiveDirectory进行粗略的管理，它不会像域管理组那样分发出太多的权限。
Be aware that once the machine is added to the domain, the group for domain Admins is added by default on the local machine, shown in Figure 1.
注意，一旦本地计算机添加到域，Domain admins组将默认添加到本地计算机上，如图1所示。
Since the members of the domain Admins group in the root domain can add and remove members to this group, I do suggest this group has no members on a daily basis.
鉴于域管理组中的成员可以添加或者删除该组成员，所以我建议日常情况下该组没有任何成员比较好。
Its setup and operation is solely in the domain of the admins.
它的设置和操作只在管理员的域中进行。
Its setup and operation is solely in the domain of the admins.
它的设置和操作只在管理员的域中进行。
应用推荐