I'm after a list of tasks that can only be performed by an Enterprise Administrator and not by a domain admin in the forest root. eg Authorise a DHCP server.
In general terms, what does everyone do with their Enterprise Admin membership? I'm wondering if it should have any members at all on a day-to-day basis and users only added temporarily when an Enterprise Admin task crops up, what do you all think? Also, is anyone aware of any application service accounts that require Enterprise Admin rights? List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
