Rights needed to add PC to domain

  • Thread starter Thread starter Darrell
  • Start date Start date
D

Darrell

If I want certain users to be able to add their PC to the domain, what group
should I add them to?

Darrell
 
just delegate them right to create/delete computer account into Computers
container in AD + they must be local Admin on their workstations

See http://support.microsoft.com/?kbid=251335 for more info.

--
Regards

Matja¾ Ladava, ladava.com
MCSA, MCSE, MCT
Microsoft MVP Windows Server - Directory Services
e-mail: (e-mail address removed), (e-mail address removed)
 
By default, all users can add up to ten machines to the domain.

If you want to add more you can, like Matjaz stated, grant a certain group
create computers permission to the computers container, modify the
ms-DS-MachineAccountQuota domain partition attribute, or you can grant the
user(s) additional rights (Add workstations to domain) via GPO.


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/

If I want certain users to be able to add their PC to the domain, what group
should I add them to?

Darrell
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Power Users and Local Administrator Groups 2
Local PC administration 1
Big Trouble! 1
Windows XP and 2000 domain 8
Enable install rights to user for local machine via GPO? 2
Group Policy Question 2
How to allow grant,,permission an specific assigned user/group to add workstation to the domain? 3
Prevent users from joining Computers to domain? 4

Back
Top