Re: add workstations to domain

From: buzz (ch896@hotmail.com)
Date: 04/19/03


From: "buzz" <ch896@hotmail.com>
Date: Fri, 18 Apr 2003 15:02:04 -0700


Thanks Steve, i removed the ability of all authenticated
users(except admins) to add 10 workstations to domain
(default), this delegation thing looks like it might work
though, appreciate the help!
>-----Original Message-----
> I believe that user right only applies to domain
controller policy.
>However even so I think that users given the right there
will only be able
>to do 10 workstations. You may want to look into
delegating control to
>creating computer object. --- Steve
>
>From
>MS:--
***********************************************************
************
>***********
>a.. Users who have the Create Computer Objects permission
on the Active
>Directory computers container can also create computer
accounts in the
>domain. The distinction is that users with permissions on
the container are
>not restricted to the creation of only 10 computer
accounts. In addition,
>computer accounts that are created by means of "Add
workstations to domain"
>have Domain Administrators as the owner of the computer
account, while
>computer accounts that are created by means of
permissions on the computers
>container have the creator as the owner of the computer
account. If a user
>has permissions on the container and also has the "Add
workstations to
>domain" user right, the computer is added, based on the
computer container
>permissions rather than on the user right.
>
>
>"Buzz" <ch896@hotmail.com> wrote in message
>news:021101c305ef$b31f9560$a101280a@phx.gbl...
>> hello all,
>>
>> I have been trying to give one user the right to add
>> workstations to the domain. at the domain level i gave
>> this person the add workstations to domain right, he is
>> still not able to, I checked with a test account of mine
>> to make sure and it did not work, what other rights do i
>> need to grant the user to add workstations to the domain
>> (win2k)?
>>
>> Regards, buzz
>
>
>.
>



Relevant Pages

  • Re: SBS Slow user logons problem
    ... You deleted both accounts and created new accounts for them (I also saw the ... Go to all workstations, log in as the Domain Admin and delete ALL profiles ... I have deleted the Reverse DNS zone on the SBS server and recreated it. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS Slow user logons problem
    ... You deleted both accounts and created new accounts for them (I also saw ... Go to all workstations, log in as the Domain Admin and delete ALL profiles ... I have deleted the Reverse DNS zone on the SBS server and recreated it. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS Slow user logons problem
    ... You deleted both accounts and created new accounts for them (I also saw the ... Go to all workstations, log in as the Domain Admin and delete ALL profiles ... I have deleted the Reverse DNS zone on the SBS server and recreated it. ... Connection-specific DNS Suffix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Open a UNC path with different credentials
    ... which is a local admin on every machine on the domain. ... all workstations, and then add domain user accounts to the domain group as ... domain-based workstation admin accounts setup for the purpose). ...
    (microsoft.public.scripting.vbscript)
  • Re: Workgroup to Domain Transition
    ... SPD typed: ... There is really no such thing as a workgroup in the real sense. ... to your server, join the workstations to the domain, and migrate profiles ... You can continue to use the Local User Accounts on ...
    (microsoft.public.windows.server.networking)