Anything that goes outside the scope of a domain
1. Authorize a DHCP server
2. Create sites
3. Create a subnet object
4. Assign subnet objects to sites

Of course, the above tasks could be delegated

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Sent: Friday, June 25, 2004 8:10 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Enterprise Admin members

I'm after a list of tasks that can only be performed by an Enterprise
Administrator and not by a domain admin in the forest root. eg Authorise
a DHCP server.

In general terms, what does everyone do with their Enterprise Admin
membership? I'm wondering if it should have any members at all on a
day-to-day basis and users only added temporarily when an Enterprise
Admin task crops up, what do you all think?

Also, is anyone aware of any application service accounts that require
Enterprise Admin rights?
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to