Implementing the Domain Controller Administrators Role
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
For each instance of this role, in each domain use the following procedure to implement an instance of the Domain Controller Administrators role.
To implement an instance of the Domain Controller Administrators role
Create a Domain Local Group called <Domain-Name> <location> Domain Controller Admins in the Service Management OU in the domain (ou=Service Management, dc=<Domain>).
Make this group a member of the BuiltIn\Administrators group (CN=Administrators, CN=Builtin, DC=<domain>) in the domain.