Domain Admin Rights
Figure. Domain admin rights.
See dialog information in Default Admin Rights.
Here you can define the rights for domain administrators. The most options are self-explanatory. (The Restricted privileges option -if checked, the appropriate domain administrator has only rights to change passwords within the administered domain.)
By default, you can assign the rights to manage particular type of accounts. If you check it only in the dialog, it means this domain administrator will have rights to manage such accounts only in the domain it belongs to.