On Sat, Aug 27, 2011 at 4:22 PM, TAKAHASHI Motonobu <monyo at monyo.com> wrote: > I recommend that "Domain Admins" global group should be created with > rid=512 to grant administrative rights for its domain itself. > > Thanks for the help. Unfortunately this would give them to much privileges.