Re: Add PC to domain Problem

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 11/25/05

  • Next message: chevytrk826: "Re: User ID & Password" 
    Date: Fri, 25 Nov 2005 16:35:51 +0100

    Hi Peter,

    The thing with the policy "Add workstations to domain" is to set it up on
    Default Domain Controller Policy and not on Default Domain Policy.

    Add workstations to domain
    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/7207aa3e-d95d-4176-a1ca-bc629f1ca698.mspx

    Don't give users permissions to Computers Container since there could be a
    security issue with this. 

    -- 
Mike
Microsoft MVP - Windows Security
<peter.marshall@caris.com> wrote in message 
news:1132929470.792124.222610@g14g2000cwa.googlegroups.com...
>I know this has happened to a number of people aready, from reading
> past posts, however, I have not been able to fix my problem.
>
> I am trying to give a user in our company the ability to add pc's to
> the domain.  I have tried 2 ways.  The first was to right click on
> "Computers" in AD, and give him permissions there.  That did not work.
> I then tried to edit the domain policy, and give him the abilites
> throught the "add Pc's to the domain" option..  That also did not work.
>
> In both cases, I tried to add the group that contains his name, and
> then tried simply adding his name.
>
> I read that every user should be able to add up to 10 machines to the
> domain.  That is not the case here. (I became the admin here after the
> domain was already set up .. )  I am not sure where that setting is (I
> do not want to turn it off, however was also wondering if this could be
> causeing part of the problem).
>
> One last thing.  I just upgraded our domain controllers from win2k
> server, to win 2003 server last week.  I am not sure if this could be
> part of the problem.  I did not try to give him permissions when we had
> the win 2k server, so I do not know if it worked then,
>
> Thank you for any input,
>
> Peter
>
  • Next message: chevytrk826: "Re: User ID & Password"

    Relevant Pages

    • Default Domain Policy 2003
      ... Recently an external auditor suggested we use the logon message (Default ... the default domain policy it applies to my sever OU, and we have a server we ... overrides it and none of our workstations sho the message. ...
      (microsoft.public.win2000.group_policy)
    • Re: Default Domain Policy 2003
      ... I can't move the default domain policy to the workstations OU because the ... Recently an external auditor suggested we use the logon message (Default ... the default domain policy it applies to my sever OU, and we have a server ...
      (microsoft.public.win2000.group_policy)
    • Exchange - Default Domain Policy Issue
      ... This IS an exchange issue - background first though... ... Default Domain Policy was missing. ... utility which reset the DD Policy and Domain Controller ... I have two issues with my Exchange 2003 server that I am ...
      (microsoft.public.exchange.misc)
    • Legal Notice turns into nightmare
      ... NoticeText" on the DC so it would propagate to all workstations, ... etext. ... gpt00001.dom = Default Domain Policy ...
      (microsoft.public.win2000.registry)
    • Local Policy doesnt allow logon interactively
      ... We have a windows 2000 serve computer running Active Directory. ... to log into any of the workstations locally as administrator. ... new OU and assigning the default domain policy and still unable to log into ...
      (microsoft.public.win2000.group_policy)