it doesn't matter if the account has domain admin rights.. you just need local admin rights (you can have domain admin rights and not have local admin rights). If you try to open the administrators group in user manager and you get an error, you don't have the correct rights..