Re: Removing an XP computer from Domain Controllers group.
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 10/01/04
- Next message: Steven L Umbach: "Re: Possible to grant additional rights to a built-in group"
- Previous message: Christian: "Re: Possible to grant additional rights to a built-in group"
- In reply to: GreyhawkC&D: "Removing an XP computer from Domain Controllers group."
- Next in thread: greyhwk: "Re: Removing an XP computer from Domain Controllers group."
- Reply: greyhwk: "Re: Removing an XP computer from Domain Controllers group."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 30 Sep 2004 23:49:59 -0500
A domain computer can have only one active account in the domain. If you run
the support tool gpresult on the XP Pro computer in question it will tell
you what container it is in. The other account can be deleted. If the active
account is the domain controllers container you can then move it into
whatever container you want. An XP Pro computer can not be a domain
controller. Just because a computer is in the domain controller container
does not make it a domain controller. The only relevance would be that the
Domain Controller Security Policy would apply to any computer in the domain
controller container which would mostly be user right assignments. With
default policy any computer in the domain controller container does not
allow regular domain users to logon to it. --- Steve
"GreyhawkC&D" <greyhwk@stormreaverkeep.org> wrote in message
news:OC%23H$e1pEHA.2104@TK2MSFTNGP10.phx.gbl...
>I have Win Serv 2003 Ent Ed and three computers running XP Pro.
>
> I recently noticed that one of my three XP systems was showing in the
> Domain
> Controllers group, as well as in the Domain Computers.
>
> I do not want it as a controller. It seems to be affecting the way the XP
> systems interact. Since it ended up with this role, the other XP systems
> cannot view the shared resources on this computer.
>
> Server 2003 tells me to change the primary function in the computer
> properties in AD manager, but when I try it, it tells me it cannot.
>
> What is it that I am missing?
>
> Thanks in advance.
>
>
- Next message: Steven L Umbach: "Re: Possible to grant additional rights to a built-in group"
- Previous message: Christian: "Re: Possible to grant additional rights to a built-in group"
- In reply to: GreyhawkC&D: "Removing an XP computer from Domain Controllers group."
- Next in thread: greyhwk: "Re: Removing an XP computer from Domain Controllers group."
- Reply: greyhwk: "Re: Removing an XP computer from Domain Controllers group."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
