Where do I set user permission allowing Domain Joining?

  • Thread starter Thread starter FN
  • Start date Start date
F

FN

I want to have one user that has virtually no permissions except that it can
join workstation computers to the domain. Where are such permissions?

I'm actually using Windows Server 2003, but I'll take the answer for Windows
2000 Server or 2003 Server.
 
Maybe use the corresponding "Right" (configured in GPO). Also remember that
a user can add a workstation 10 times himself.
 
You can use delegation wizard to delegate this permission to a particular
user to be able to join computers to the domain. You set this by
rightclicking on Computers Container in AD and use delegate of control
wizard. By default normal users can add up to 10 (can be configured)
workstations to the domain.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), MVP
(e-mail address removed)
http://ladava.com
 
Back
Top