Where do I set user permission allowing Domain Joining?

  • Thread starter Thread starter FN
  • Start date Start date
F

FN

I want to have one user that has virtually no permissions except that it can
join workstation computers to the domain. Where are such permissions?

I'm actually using Windows Server 2003, but I'll take the answer for Windows
2000 Server or 2003 Server.
 
Maybe use the corresponding "Right" (configured in GPO). Also remember that
a user can add a workstation 10 times himself.
 
You can use delegation wizard to delegate this permission to a particular
user to be able to join computers to the domain. You set this by
rightclicking on Computers Container in AD and use delegate of control
wizard. By default normal users can add up to 10 (can be configured)
workstations to the domain.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Prevent users from joining Computers to domain? 4
Rights to join a computer to workstation 5
join AD networks 2
Can't join domain: Network path was not found 3
Joining computer to my domain 2
joining server from a trusted domain into current domain, what happens to cross-domain permissions? 2
Share permissions: SBS and Windows 2003 in the same domain 2
computer can't join domain 1

Back
Top