2nd post: Add workstations to domain

From: Vivaldi (sdemiraynospam@veezy.com)
Date: 11/07/02


From: "Vivaldi" <sdemiraynospam@veezy.com>
Date: Thu, 7 Nov 2002 05:36:31 +0200


Hi all,
We upgraded our domain a few weeks ago from NT4 to W2k and just realized
today that all Authenticated Users can add workstations to domain. In our
configuration it was restricted to certain groups in NT4 domain but during
upgrade w2k should have added "Authenticated Users" to this right. A fresh
new w2k domain installation proved this. In my opinion this creates a
security weakness.
  Now here is my real question:
The above "Workstations" phrase is false, this right gives adding of servers
as well. Does anyone know a method of how to give adding to domain
permission
for only "w2k professionals" and "nt4 workstations".

Regards.
Selcuk Demiray.



Relevant Pages

  • Add workstations to domain right
    ... We upgraded our domain a few weeks ago from NT4 to W2k and just realized ... today that all Authenticated Users can add workstations to domain. ... upgrade w2k should have added "Authenticated Users" to this right. ... The above "Workstations" phrase is false, this right gives adding of servers ...
    (microsoft.public.win2000.security)
  • Re: \pc name not accessible but \pc name.Domain is accessible Server 2003
    ... I have recently upgrade from NT4 to server 2003. ... workstations. ...
    (microsoft.public.windows.server.setup)
  • Re: DNS replication when installing new DC in domain
    ... > and a Broadcom ethernet NIC is impossible, as there are no drivers for NT4 ... "promote offline to PDC" that is from this line of your original ... then upgrade to Win2k3 SP1 on that temp machine. ... prefer -- either right after install or later. ...
    (microsoft.public.windows.server.dns)
  • Re: Limiting Ability to Join Domain
    ... Microsoft MVP - Windows NT Server ... They can add maximum 10 workstations ... > Authenticated Users group by default. ... >> Microsoft MVP - Windows NT Server ...
    (microsoft.public.windows.server.setup)
  • ** Please Advise ** NT4 -> 2003 Upgrade Plan !!
    ... Going to upgrade NT4 domain to 2003 AD. ... All was ok except the fallback test with a laptop from the NT4 domain. ... includes PDC and one BDC in main office. ...
    (microsoft.public.windows.server.active_directory)