Re: "Add workstations to domain"

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Matjaz Ladava [MVP] (matjaz_at_ladava.com)
Date: 06/18/04 

Date: Fri, 18 Jun 2004 13:53:43 +0200

In AD domain a normal user has ability to add up to 10 computers to the
domain.
See http://support.microsoft.com/?kbid=251335 for all posibilities why and
how to change this behaviour. 

-- 
Regards
Matjaz Ladava
MVP Windows Server - Directory Services
matjaz@ladava.com, matjazl@mvps.org
"Giles" <Giles@discussions.microsoft.com> wrote in message 
news:DA9763F9-CCF1-4BFC-8DF3-94C899CC97D4@microsoft.com...
> Hello all,
>
> May be a silly question, however:
>
> I have created an ordinary domain user in a group within an OU (Staff 
> OP's).  I intended this user to have the ability to add workstations to a 
> domain using the "User Rights Assignments".  I do not want them to be a 
> member of any group except Domain Users.  The problem i'm finding is that 
> the user already seems to be able to join computers to a domain without 
> specifying the priviledge.  He's not an administrator or a member of.  Can 
> anyone tell me why this maybe happening?
>
> Thanks in advance.

Relevant Pages

  • Re: "Add workstations to domain"
    ... > I know I'm being a real pain now but how come by default a normal domain user has this ability? ... is it possible to create a computer account within a specific OU from the workstation itself, rather than manually moving it from the normal Computers container to the OU you wish it to be in? ... >>So that a normal user can't abuse the ability and D.O.S. an environment by ... >>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: A C++ Whishlist
    ... computer your member function can't throw an exception. ... members with a NULL pointer on almost all computers out there. ... Mine is already robust; if you want to make yours robust ... Doesn't matter if the standard is changed or not. ...
    (comp.lang.cpp)
  • Re: THE SPORTS LIST - Famous Nicknames
    ... As a member of the Boston Red Sox, ... > amazingly maintaining the ability to run and function as an otherwise normal ... "Seneca is a huge factor in every game," ISU coach Dan McCarney ... The nickname quickly took off, ...
    (rec.sport.football.college)
  • Windows Update + Active Directory/Group Policy == Pain
    ... Ahoy (sorry for cross-posting to this usenet group too, ... This is just a vanilla Windows 2003 Domain with 3 member computers, 1 DC, ... On all the computers except the domain controller Windows Update/Microsoft ...
    (microsoft.public.windowsupdate)
  • Re: Help needed installing a usb-serial cable
    ... Pro computers to check in members at 3 health clubs. ... The member flashes their ... key/card at the scanner, the scanner reads the member ID, shoots it ...
    (microsoft.public.windowsxp.general)