weblancePlease read the wonderful documentationhttp://wiki.contribs.org/Client_Authentication:Windows#Domain_Admins_group