Users added to the Local Administrators group on a managed member server are added to the Built-in D (NETIQKB20725)

fact
Directory and Resource Administrator 6.x

symptom
Users added to the Local Administrators group on a managed member server are added to the Built-in Domain Admins Assistant Admin Group.

symptom

Users in the local administrators group of a managed member server can:

1. See all objects in all managed domains, but cannot manage them.
2. Are able to modify DRA configuration information.

cause
The cause of this issue is that Directory and Resource Administrator (DRA) treats the member server being managed by DRA, as its own  'domain' and hence adds local Adminstrators group to the Built-in Domain Admins Assistant Admin group.

fix
This issue has been fixed with the release of DRA version 7.0,  Upgrade DRA to the latest version to resolve this problem.

Formerly known as NETIQKB20725