Rights needed to add PC to domain

  • Thread starter Thread starter Darrell
  • Start date Start date
D

Darrell

If I want certain users to be able to add their PC to the domain, what group
should I add them to?

Darrell
 
just delegate them right to create/delete computer account into Computers
container in AD + they must be local Admin on their workstations

See http://support.microsoft.com/?kbid=251335 for more info.

--
Regards

Matja¾ Ladava, ladava.com
MCSA, MCSE, MCT
Microsoft MVP Windows Server - Directory Services
e-mail: (e-mail address removed), (e-mail address removed)
 
By default, all users can add up to ten machines to the domain.

If you want to add more you can, like Matjaz stated, grant a certain group
create computers permission to the computers container, modify the
ms-DS-MachineAccountQuota domain partition attribute, or you can grant the
user(s) additional rights (Add workstations to domain) via GPO.


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

If I want certain users to be able to add their PC to the domain, what group
should I add them to?

Darrell
 
Back
Top