Delegating Add computer rights

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: milt (anonymous_at_discussions.microsoft.com)
Date: 02/18/04 

Date: Wed, 18 Feb 2004 06:18:01 -0800

Is the user in any group, such as everyone, where Deny has
been assigned?
>-----Original Message-----
>Main Problem: Got a problem where a user has been
assigned full control on computer objects in an OU,
however when that user opens ADUC they aren't able to add
a new computer object to the OU.
>2nd Problem: I have also given them full control on
computer objects in the built in Computers Container, and
they can't do the same there
>3rd problem: If they add a computer to the domain by
going through the Identification tab on my computer, the
computer is added to the builtin computers container,
however the user is now getting an error saying that they
have exceeded the limit for how many computers they can
add (he's reached the default 10 computer accounts)
>4th Problems: The user can't move computer objects
between the builtin computers container and their computer
OU.
>
>What rights should the user be assigned on the OU and teh
builtin computer container to allow for the above to work
properly.
>.
>

Relevant Pages

  • Delegating Add computer rights
    ... Got a problem where a user has been assigned full control on computer objects in an OU, however when that user opens ADUC they aren't able to add a new computer object to the OU. ... The user can't move computer objects between the builtin computers container and their computer OU. ...
    (microsoft.public.win2000.active_directory)
  • Re: How grant rights to add servers to domain into a particular OU
    ... It is a Security Group that I am using to Delegate Control to. ... Add the appropriate user account and click Next. ... Click Computer Objects and Create selected objects in this folder. ... I have given the OU Server Admins group "Special Permissions" of Full ...
    (microsoft.public.windows.server.active_directory)
  • Re: delegate control to computer management to everywhere except oneOU
    ... TEST THIS FIRST on an OU with one test computer, if it works as expected, delegate control at domain level and on the OU that you like to exclude remove the account/group form the security tab. ... Click Only the following objects in the folder, and then from the list, click to select the following check boxes: Computer objects ... click to select the following check boxes:. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD Delegation Issue - Computer Objects
    ... I've successfully delegated the ability to create machines and add them to ... I would like to refrain from delegating more control than is ... group complete control over computer objects in this OU without allowing ...
    (microsoft.public.windows.server.active_directory)
  • RE: Delegate Move of Computers Between OUs
    ... giving full control of the computer objects and allowing adding and deleting ... computer objects on all the applicable OUs is acceptible and I find it works. ... permissions applied onto 'Computer objects'. ... Microsoft Online Partner Support ...
    (microsoft.public.windows.server.active_directory)