Re: Adding computer to a domain

From: Bruce Chambers (bruce_a_chambers_at_h0tmail.com)
Date: 04/29/05


Date: Thu, 28 Apr 2005 19:56:25 -0600

Torgeir Bakken (MVP) wrote:

> Hi,
>
> Active Directory domains allow any authenticated user the right to
> create up to ten computer accounts in the domain by default.
>
> More about this here:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;228146
>
>

        Wish I'd read that before I responded. ;-} However, I'm having a real
hard time imagining that any security conscious domain admin would leave
the default permissions in place.

-- 
Bruce Chambers
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever count on having 
both at once. - RAH


Relevant Pages

  • Re: Adding computer to a domain
    ... Active Directory domains allow any authenticated user the right to ... create up to ten computer accounts in the domain by default. ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: computeraccount in admingroup?
    ... Computer accounts in AD are a type of user account. ... it will work just like a user has been added to the admin group. ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: Still A Open Relay
    ... It is depressing that this isn't even safe now. ... ...there is no ISP's servers available ... I think the "authenticated user" is still the best way to go for us. ... Phillip Windell [MCP, MVP, CCNA] ...
    (microsoft.public.windows.server.sbs)
  • Re: How to assign Registry User Permission from Group Policy ?
    ... Then apply the GPO to appropriate computer accounts. ... MVP: Windows Server - Active Directory ...
    (microsoft.public.windows.server.active_directory)
  • Re: Chane SID of a user?
    ... Newsid replaces SIDs on computer accounts, ... Paul Adare ... MVP - Identity Lifecycle Manager ...
    (microsoft.public.security)