Does anybody know how to prevent a domain admin on a 2003 system adding others to the domain admin group?
I have a junior administrator who’s tasks are varied so has Domain Admin access, but he keeps adding contracters and external users to the domain admin group.
I tried taking domain admin access from him and delegating various tasks to him but he keps finding things he needed to do but couldn’t.
Any suggestions? Cheers.
