GPO on default domain controllers OU

  • Thread starter Thread starter nwtest
  • Start date Start date
N

nwtest

I'm having a look on the GPO(default domain controllers
Policy) for Domain controllers and i found out that by
default, authenticated users has specific rights to join
computer to the domain.
What do you mean by this is it under only this Default DC
ou and not to the entire domain. Does this mean that any
users can join up to 10 machines in the domain controllers
OU.

As far as I understand this specific rights should be
placed in default domain policy(higher level) and not in
this default Domain controllers ou??(confuse here).
Please enlighten me.

What If i remove this right and add it instead to the
domain default policy what will be the diffrence..
 
That particular user right can only be configured at the Domain Controller
Policy level and will not apply if done at domain level. It does allow a regular
user to add up to ten workstations to the domain. --- Steve
 
Back
Top