What is the difference between Enterprise Administrator and Domain Administrator?

[Revolved101]

As the OP says I Just want to know the difference between and Enterprise Admin and Domain Admin? I did google it but it was very less straight forward answer all it says Enterprise Admin has power over the AD Forest compared to Domain Admin but I want more detail then just that.

 

[Demon_Skeith]

If I, the domain admin want to setup the user's email profile I am unable to, that would be the Enterprise Admin because they have the highest access.

 

[Revolved101]

If I, the domain admin want to setup the user's email profile I am unable to, that would be the Enterprise Admin because they have the highest access.

But you could right? I mean as Net Admin or it just for Sys Admins

 

[Demon_Skeith]

But you could right? I mean as Net Admin or it just for Sys Admins

If the domain admin is granted access then yes, but typically they don't have those rights.

 

[Revolved101]

If the domain admin is granted access then yes, but typically they don't have those rights.

But who is allowed access just IT Managers? and it cause of the screw up they don't grant those access rights to DA?

 

[Grungie]

But who is allowed access just IT Managers? and it cause of the screw up they don't grant those access rights to DA?

It’s a part of least privileges and role based access controls.

 

[Revolved101]

It’s a part of least privileges and role based access controls.

I get that but I don't get it at the same time like it isn't like a lot of IT Admin if there are 3 or more suppose to get access to this privilege's?

 

[Grungie]

I get that but I don't get it at the same time like it isn't like a lot of IT Admin if there are 3 or more suppose to get access to this privilege's?

Depends on the size of your environment and how many people you support. There isn’t anything in cybersecurity explicitly stating how many people can have those rights. You should limit it, but there’s no hard and fast number.

 

[Revolved101]

Depends on the size of your environment and how many people you support. There isn’t anything in cybersecurity explicitly stating how many people can have those rights. You should limit it, but there’s no hard and fast number.

3 including me I don't have it lol

 

[Demon_Skeith]

3 including me I don't have it lol

Ever hear the term, too many cooks in the kitchen? Same thing for IT, you don't want too many hands messing with stuff or things will break in ways that brings the Drinking Spirits forward.

 

[Revolved101]

Ever hear the term, too many cooks in the kitchen? Same thing for IT, you don't want too many hands messing with stuff or things will break in ways that brings the Drinking Spirits forward.

yeah that sucks but oh well...