Topic

Microsoft Active Directory Domain Services security group memberships

Applicable to

all

History

Sep 2024

Computer accounts are not members of the Domain Admins, Enterprise Admins or other highly-privileged security groups.

A new control was added recommending that computer accounts not be members of the Domain Admins, Enterprise Admins or other highly-privileged security groups.