Block User Adding Computer to domain

  • Thread starter Thread starter Smirnoff
  • Start date Start date
S

Smirnoff

Hello

First i wanna say thanks to listen to me and sorry for my bad english

I've seen since NT5(2000 server) and NT5.2(2003 srv)
A user can add Computer Object (up to 10 maximum)

And i wanna denied access to that new specificity

i hope my quest is clear

Thanks alot for answer if u have one

Smirnoff
 
Hello Smirnoff,

Open Active directory Users and Computers. Go to the root of the
domain, right mouse click and choose properties. Choose the Group
Policy tab, then choose edit. Navigate down to Computer
Configuration\Windows Settings\Security Settings\Local Policies\User
Rights Assignments. Look for "Add workstations to domain" and add the
groups or users that you want explicit access.
 
m_pact a écrit avec des électrons à 100% recyclés...
Hello Smirnoff,

Open Active directory Users and Computers. Go to the root of the
domain, right mouse click and choose properties. Choose the Group
Policy tab, then choose edit. Navigate down to Computer
Configuration\Windows Settings\Security Settings\Local Policies\User
Rights Assignments. Look for "Add workstations to domain" and add the
groups or users that you want explicit access.
Click to expand...

Thanks for all
it works fine ^^
 
Hi,

Forget my last message, it doesnt work in fact ...
User can always add Machine into domain, and in that GPo i've just
allowed Domain/admin. And simple user can add machine.

DO u have another idea? or maybe i use wrong that GPO

Thanks for answer
Best regards

Smirnoff
 
Back
Top