XP machines on my domain added by non-admin

[Mickey]

How do I stop non-admin users from adding XP machines to
my Windows 2000 domain? Again, how is that even possible.
Why is such a security problem not fixed and or a fix
released allready?

 

[Matjaz Ladava [MVP]]

By default users have the ability to add up to 10 computers to the domain.
See http://support.microsoft.com/default.aspx?scid=kb;EN-US;251335 Method 3
and change ms-DS-MachineAccountQuota to 0

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[rick]

-----Original Message-----
How do I stop non-admin users from adding XP machines to
my Windows 2000 domain? Again, how is that even possible.
Why is such a security problem not fixed and or a fix
released allready?
.
Well first remove those users from the account operaters

or higher security groups. Then create a global policy in
ADS that prevent the addition of Windows 5.1. Products
such as Hyena (free download) can help you monitor yur
network for XP machines.