This user account must be a member of the Domain Admins group and all other groups that you can see starting with Domain.
这个用户帐户必须是Domain admins组和所有以domain开头的其他组的成员。
The one group that has global control over all users, groups, and computers in a single domain is the Domain Admins group.
该组可以全权管理单独域中的所有用户、组以及电脑。
This provides granular control over all Active Directory functions, without giving away too much power like the Domain Admins group does.
该委任对所有的Active Directory进行粗略的管理，它不会像域管理组那样分发出太多的权限。
应用推荐