Re: Security Requirements for Joining PC to AD??

From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 11/13/03


Date: Wed, 12 Nov 2003 22:09:51 -0500

I could be wrong, but I do not believe that to be true.

"Danny Sanders" <Danny.Sanders@cpcNOmedSPAM.org> wrote in message
news:O7DIl7HqDHA.2500@TK2MSFTNGP10.phx.gbl...
> A "regular" user account can join 10 PCs to the domain.
>
> hth
> DDS W 2k MVP MCSE
>
> <anonymous@discussions.microsoft.com> wrote in message
> news:093501c3a835$8a490480$a401280a@phx.gbl...
> > Hi,
> > Is it possible to setup an Account that can join PC's to
> > AD without making the account a member of Admins Admins???
> >
> > (I want to give the account the minimum rights necessary
> > to join a PC to the W2K AD)
> >
> > Many thanks
> >
> >
> > G
>
>



Relevant Pages

  • Re: contract users
    ... > account with admin rights, I don't want them to be able to ... > the script for the particular user account so the password ... >>DDS W 2k MVP MCSE ...
    (microsoft.public.win2000.security)
  • Re: Complex Password Policy and service accounts
    ... Set the "password never expires" property on the user account associated ... DDS W 2k MVP MCSE ... > Any idea on ways to solve this, I presume a second domainis one way, any ...
    (microsoft.public.win2000.advanced_server)
  • Re: Mail forwarding
    ... Set up a contact using the hotmail account as the email address. ... DDS W 2k MVP MCSE ...
    (microsoft.public.windows.server.networking)
  • Re: Security Requirements for Joining PC to AD??
    ... A "regular" user account can join 10 PCs to the domain. ... DDS W 2k MVP MCSE ... > AD without making the account a member of Admins Admins??? ...
    (microsoft.public.win2000.security)
  • Re: Problem managing accounts in protected groups
    ... For you administrator accounts create an own OU directly under the domain name and place there the domain admin accounts without any restrictions through policies or whatever. ... And create for them a normal domain user account for the daily work with normal restrictions like any other user. ... If now the account under the Administrators OU is locked another one from that OU can easily unlock them without any problem, because they all are domain admins in that OU. ... heard about that someone will give more security permissions to users ...
    (microsoft.public.windows.server.active_directory)

Quantcast