GP -- adding workstation to domain

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello ,

While working for our corporate client, I discovered security
misconfiguration:

-- Regular users can add workstations to domain
I've tried to fix it up by going to default domain gpo -- computer
configuration -- windows settings -- security settings -- local policies --
User rights assignment.

In the list of user rights i changed setting of "Add workstation to domain"
to
Administrators, Enterp. admins and domain admins groups only.

I wait some time for replication to occur.

The I tested the new setting -- it didn't work, users still able to add
computers to domain.
Any ideas why?

I will be very grateful for your help.
Thanks,
Gary
 
Hi,

You are able to do it for example with ACL´s in the "Computers" container.

Qualquer sugestão deve ser testada antes de aplicada - www.gupade.org
 
Back
Top