We have a new Windows Server 2012 R2 set of servers.
The administrator account is in the domain admins group, it's called site-admin, it's also in the Administrators group.
The site-admin user is also a member of Domain Users group, is it safe to remove site-admin from the Domain Users group??
We don't need this particular user to be affected by Domain Users policies and the like...
Does the site-admin user, being an Administrator, have the ability to remove itself from the Domain Users group??
Thank you, Tom