If I modify BUILTIN\Administrators in the AD Users and Computers tool ...

Richard Sharpe realrichardsharpe at gmail.com
Sat Jul 6 08:41:00 MDT 2013

On Sat, Jul 6, 2013 at 1:33 AM, Stefan (metze) Metzmacher
<metze at samba.org> wrote:
> Hi Richard,
>> If I modify BUILTIN\Administrators using the AD Users and Computers
>> tool to add a local or domain user to that group, is it expected that
>> this would apply to all DCs and Member Servers and Clients joined to
>> the domain?
>> I would say no, since these the BUILTIN groups are local to each
>> machine. However, it is possible that there is something that rolls
>> these changes out to all DCs in the domain, perhaps.
> All DCs share the same BUILTIN domain, it's located
> in the AD tree: CN=Builtin,${DOMAINDN}

OK, so that I did not know.

However, I think I am on pretty firm ground when I say that member
servers and workstations each have their own BUILTIN domain. Is that

Richard Sharpe

More information about the samba-technical mailing list