3 votes
Accepted

Do Windows domain builtin groups grant the same permissions as the equivalent machine builtin groups? (eg, Performance Monitor Users)

Domain BULTIN groups do NOT confer access to domain members by default. Domain BUILTIN groups effectively function as the equivalent of local machine groups for domain controllers. -- You can adjust ...
Semicolon's user avatar
  • 1,878
2 votes

Do Windows domain builtin groups grant the same permissions as the equivalent machine builtin groups? (eg, Performance Monitor Users)

The BUILTIN groups in Active Directory only apply to the Domain Controllers. Adding users or groups to them doesn't apply to the workstations nor member servers. However, Group Policy Restricted ...
MM11's user avatar
  • 21
1 vote
Accepted

Domain Controller Blocking SAMR Request

Check the RestrictRemoteSAM registry value. The default settings for that were changed in Windows 10 version 1607 and Windows Server 2016. It may also be a policy setting "Network access: ...
Greg Askew's user avatar
  • 36.8k

Only top scored, non community-wiki answers of a minimum length are eligible