Re: Add Workstation Right

From: Mark (anonymous_at_discussions.microsoft.com)
Date: 03/24/04 

Date: Wed, 24 Mar 2004 04:48:53 -0800

Great Info.
Thanks Steve.
- Mark
>-----Original Message-----
>That right is configured in the Domain Controller
Security Policy - it will be
>ignored if set at levels outside of domain controller
container. In a default
>installation the authenticated users group has this right
which allows them to
>add up to ten workstations to the domain. Another way is
to use "delegation" on
>the appropriated AD container to give a user/group
permissions to add computers
>to the container. See KB below for details. --- Steve
>
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;251335
>
>"Mark" <anonymous@discussions.microsoft.com> wrote in
message
>news:d5a801c410e1$db3cafd0$a001280a@phx.gbl...
>> How do I check if someone has the "Add Workstations to
>> Domain" right? How would I give a User or a group that
>> right?
>> Thanks,
>> Mark
>
>
>.
>

Relevant Pages

  • Re: Logging in interactively
    ... users/administrators/everyone are in the logon locally user right and add ... Computers, look in the domain container by right clicking the domain name ... > the local security policy on each client workstation and the 'users' group ... If you want to allow logon access to one domain controller, ...
    (microsoft.public.win2000.security)
  • Re: Local policy does not allow interactive login
    ... I am not sure what the exact problem is but if the server you took offline was a ... you are in native mode as shown in Active Directory Users and Computers. ... fsmo domain controller as their preferred dns server in tcp/ip properties as shown by ... The fact that you can not access Domain Security Policy may be due to the fact that ...
    (microsoft.public.win2000.group_policy)
  • Re: Upgrading from Windows 2000 to Windows 2003
    ... I suggest you force a replication by repadmin command line below: ... Check if the ForestUpgrade Container is replicated this time. ... >replication to take place so that the other domain controller has the ... >our other domain controller is not receiving the ForestPrep updates. ...
    (microsoft.public.windows.server.migration)
  • Re: RPC - ImportBegin() / ImportNext()
    ... their domain controller, an instance of our service was run by a user with AD ... Removing this container and ensuring the service is run by users whose ... > If you use the locator and the RpcNs* APIs, the endpoint mapper should not ...
    (microsoft.public.win32.programmer.networks)
  • Re: Service Account?
    ... To grant the Generate Security Audits privilege to the Microsoft Exchange service account, open the Windows 2000 Group Policy editor. ... If it is a domain controller, select the browse button and select the "Domain Controllers." container. ... double click the "Generate Security Audits" object and add the Microsoft Exchange service account to the list of users granted the "Generate Security Audits" right. ...
    (microsoft.public.exchange.setup)