Re: Right to add computers to a domain
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 16 May 2006 13:47:36 -0500
By default a user has the ability to add ten workstations to the domain.
That user right is configured by default and is called add workstations to
the domain in Domain Controller Security policy under local policies/user
rights. You can give a domain user the permissions to create computer
objects in an Active Directory container such as an OU or the domain. Keep
in mind that user will then be the owner of that computer object if that is
a concern. --- Steve
"Riki" <riki@xxxxxxxxxxxxx> wrote in message
news:ObU8a%23$dGHA.4576@xxxxxxxxxxxxxxxxxxxxxxx
Is it possible to create a user on a domain (Windows 2003 Server) with the
right to add computers to that domain, but without being member of the
Domain Admins group?
I'm working for a training center for pc technicians, and our students
often have to install different versions of windows on their system as an
exercise.
After the installation, they should be able to add their computer to our
domain, without the intervention of a domain admin. That's why we want to
give them the name and password of an account that can do just that.
Is that possible?
Thanks for your help.
--
Riki
.
- References:
- Right to add computers to a domain
- From: Riki
- Right to add computers to a domain
- Prev by Date: File Level Blocking
- Next by Date: Re: File Level Blocking
- Previous by thread: Re: Right to add computers to a domain
- Next by thread: Default Domain Controllers Policy scope
- Index(es):
Relevant Pages
|
|
