Account Operators Administrators
Incoming Forest Trust Builder
Members can administer domain user and group accounts.
Members have complete and unrestricted access to the computer/domain.
Members can override security restrictions for the sole purpose of backing up or restoring files.
Members of this group are permitted to publish certificates to the Active Directory.
Members have the same access as members of the Users group by default, except for the Guest account, which is further restricted (Guest will be disabled).
Members of this group can create incoming, one-way trusts to this forest.
Table 12-1 (continued)
Was this article helpful?