If I modify BUILTIN\Administrators in the AD Users and Computers tool ...

[Stefan (metze) Metzmacher]

Hi Richard,

> If I modify BUILTIN\Administrators using the AD Users and Computers
> tool to add a local or domain user to that group, is it expected that
> this would apply to all DCs and Member Servers and Clients joined to
> the domain?
> 
> I would say no, since these the BUILTIN groups are local to each
> machine. However, it is possible that there is something that rolls
> these changes out to all DCs in the domain, perhaps.

All DCs share the same BUILTIN domain, it's located
in the AD tree: CN=Builtin,${DOMAINDN}

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130706/6b175693/attachment.pgp>