Implementing the Domain Controller Administrators Role

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

For each instance of this role, in each domain use the following procedure to implement an instance of the Domain Controller Administrators role.

To implement an instance of the Domain Controller Administrators role

  1. Create a Domain Local Group called <Domain-Name> <location> Domain Controller Admins in the Service Management OU in the domain (ou=Service Management, dc=<Domain>).

  2. Make this group a member of the BuiltIn\Administrators group (CN=Administrators, CN=Builtin, DC=<domain>) in the domain.