Computers are listed as part of the Built-in Domain Admins Assistant Admin Group in an NT domain (NETIQKB27721)

fact
Directory and Resource Administrator 6.60

fact
Directory and Resource Administrator 7.x

symptom
Computers are listed as part of the Built-in Domain Admins Assistant Admin Group in an NT domain

cause
The cause of this issue is the Domain Users Group was a member of the Administrators group.

fix
In an NT 4 domain, typically computer objects cannot be part of a group.  However, in an NT 4 domain, the Domain Users group is a special group which can contain computer objects.  The issue can be resolved by removing the Domain Users group from the Administrators group.

Formerly known as NETIQKB27721