AD Design

By insatiable193 ·
I have a question regarding the AD groups.. I hope that someone will help me..
Can the enterprise Admin restrict the Privileges of the domain Admin like deciding what the domain admin should do or should not?? Or if the enterprise admin implement GPOs, is there a way that the domain admin will not be able to change that GPO?

Im asking this because we wanna design our AD, and we want to make one Parent domain and 3 child domains, each domain is in different location, we want the enterprise admin of the parent domain to take control of its own domain as well as the child domains, while we dont want the domain admins of the child domains to alter or to override what the enterprise admin will do to their domains, is their anyway that we can do that?? Had you experienced something similar????

ok if there is no way to control the domain admin, then we'll need to make only one domain and 3 sites.. but in this way.. what is the recomended bandwidth between these sites that are in different countries.. what is the minimum for a very very huge company? and how many users can reside in each site?

Thaaaanx in advance.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Share your knowledge

Related Discussions

Related Forums