delegating ADD computer rights to helpdesk

  • Thread starter Thread starter John
  • Start date Start date
J

John

Hi,
Just wanted to get few ideas how some of you manage the addition and
removal of computername in your AD environment.
I am task with coming up with a solution that would allow the desktop group
the ability to ONLY add and remove computers based on a particular OU in AD
.. I was thinking of perhaps delegating "ADD computer to network rights" to
the desktop group however when a computer is added to the domain the
computer account is re-directed to the default computers OU. I know I can
have the desktop group create the computer account in the appropriate OU
then join the computer to the domain. This appears to work but I just wanted
to get some ideas what tools or processes your desktop group currently uses.

TIA
John
 
Back
Top