Directory and Resource Administrator 6.x
Users added to the Local Administrators group on a managed member server are added to the Built-in Domain Admins Assistant Admin Group.
Users in the local administrators group of a managed member server can:
- See all objects in all managed domains, but cannot manage them.
- Are able to modify DRA configuration information.
The cause of this issue is that Directory and Resource Administrator (DRA) treats the member server being managed by DRA, as its own 'domain' and hence adds local Adminstrators group to the Built-in Domain Admins Assistant Admin group.
This issue has been fixed with the release of DRA version 7.0, Upgrade DRA to the latest version to resolve this problem.