There is no minimum group membership required to complete this procedure. Review details about using the appropriate accounts and group memberships at
|To manage the domain using a different domain controller|
To open Active Directory Users and Computers, click Start, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Users and Computers.
In the console tree, right-click Active Directory Users and Computers, and then click Change Domain Controller.
Click a domain controller in the list.
Or, click the <Type a Domain Controller name or an IP Address here> field, and then type the name of a domain controller.
Performing this task does not require you to have administrative credentials. Therefore, as a security best practice, consider performing this task as a user without administrative credentials. However, you must have the appropriate administrative credentials to manage the domain that you select.
Another way to open Active Directory Users and Computers is to click Start, click Run, and then type dsa.msc.
By default, domain controllers are configured in the Domain Controllers organizational unit (OU) when they are first created.
If you select the Save this setting for the current console check box, Active Directory Users and Computers attempts to connect to the domain controller that you specify each time that you open Active Directory Users and Computers.