Users add computers to domain

  • Thread starter Thread starter Jo Remo
  • Start date Start date
J

Jo Remo

Hello

Every single user in my domain can add computers to our
domain. I can't find the permissions to disallow them.
It's not in the GPO, as I've loooked.

Any ideas? Thank you. Jo
 
Jo said:
Hello

Every single user in my domain can add computers to our
domain. I can't find the permissions to disallow them.
It's not in the GPO, as I've loooked.

Any ideas? Thank you. Jo
Click to expand...


iirc, there is a way from gpo, i have run across it several times lately. i
cannot get into our office network right now to say where in the gpo, but i
know it is there. i believe it defaults to authenticated users. sorry i
can't be of more help right now. ill watch this thread and see if i can get
the answer back to you tomorrow when i get back from work.
 
By default the policy "Computer Configuration/Windows Settings/Security
Settings/Local Policies/User Rights Assignment/Add workstations to domain"
is not defined. Re-check all GPOs.
 
The right is not defined by default on the doman policy, but is defined on
the DC policy with "authenticated users". The kb method mentioned earlier
would probably be the best way to do it.

--
David Brandt
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send e-mail directly to this alias. This alias is for
newsgroup purposes only.
 
kevin said:
iirc, there is a way from gpo, i have run across it several times lately.
i cannot get into our office network right now to say where in the gpo,
but i know it is there. i believe it defaults to authenticated users.
sorry i can't be of more help right now. ill watch this thread and see if
i can get the answer back to you tomorrow when i get back from work.
Click to expand...

looks like it has already been answered, but i'll post this anyway..open the
policy (for default policy, go to administrative tools and open
domain security policy), under computer configuration > windows settings
security settings > local policies > user rights assignment > add
Click to expand...
workstations to domain. this can also be configured under domain
controller security policy (under administrative tools) at the same
location and mine has a [default] value of authenticated users.
 
Back
Top