Re: Add Workstation Right

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 03/24/04 

Date: Wed, 24 Mar 2004 01:50:10 GMT

That right is configured in the Domain Controller Security Policy - it will be
ignored if set at levels outside of domain controller container. In a default
installation the authenticated users group has this right which allows them to
add up to ten workstations to the domain. Another way is to use "delegation" on
the appropriated AD container to give a user/group permissions to add computers
to the container. See KB below for details. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;251335

"Mark" <anonymous@discussions.microsoft.com> wrote in message
news:d5a801c410e1$db3cafd0$a001280a@phx.gbl...
> How do I check if someone has the "Add Workstations to
> Domain" right? How would I give a User or a group that
> right?
> Thanks,
> Mark

Relevant Pages

  • Re: Upgrading from Windows 2000 to Windows 2003
    ... I suggest you force a replication by repadmin command line below: ... Check if the ForestUpgrade Container is replicated this time. ... >replication to take place so that the other domain controller has the ... >our other domain controller is not receiving the ForestPrep updates. ...
    (microsoft.public.windows.server.migration)
  • Re: RPC - ImportBegin() / ImportNext()
    ... their domain controller, an instance of our service was run by a user with AD ... Removing this container and ensuring the service is run by users whose ... > If you use the locator and the RpcNs* APIs, the endpoint mapper should not ...
    (microsoft.public.win32.programmer.networks)
  • Re: Service Account?
    ... To grant the Generate Security Audits privilege to the Microsoft Exchange service account, open the Windows 2000 Group Policy editor. ... If it is a domain controller, select the browse button and select the "Domain Controllers." container. ... double click the "Generate Security Audits" object and add the Microsoft Exchange service account to the list of users granted the "Generate Security Audits" right. ...
    (microsoft.public.exchange.setup)
  • Re: Want to stop sharing Outlook Today folders
    ... You need to be looking in Active Directory Users and Computers on your ... domain controller -- the same place where you centrally manage all user ... account settings. ... whatever container you use to manager your users. ...
    (microsoft.public.exchange.clients)
  • Re: Domain GPO v DC
    ... Group Policies apply to computers or users in the ... The container is either the domain container, ... domain controller container, or an Organizational Unit that you create. ... A Group Policy after being created, can be "linked" which means it ...
    (microsoft.public.win2000.group_policy)