Re: Delegate control to user

From: Chriss3 (noSpamHere_at_chrisse.se)
Date: 06/29/04


Date: Tue, 29 Jun 2004 18:21:47 +0200

Must say I'm not sure here, Just try delegate full control to computer
objects for the particular user or group.

-- 
Regards
Christoffer Andersson
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
"joh" <anonymous@discussions.microsoft.com> skrev i meddelandet
news:2263501c45d54$d48357b0$a301280a@phx.gbl...
> Hi Christoffer,
>
> Thanks for the reply. I'm just wondering why this account
> can add a new workstations to the domain, but say for
> example if a computer breaks and its reimaged, that user
> cannot re-add that computer to the domain with the same
> NetBios name?? But a domain admin can. Just wondering if
> there is a permission I'm not setting or maybe the
> delegation is in the wrong location?
>
> Thanks,
>
> joh
> >-----Original Message-----
> >Hello Joh,
> >
> >Click View in AD users and computers, click view advanced
> features, this
> >enable a security tab when you click properties for a
> object. You can see
> >the security of an object and see what you have
> delegated. The Delegation Of
> >Control Wizard is just another simple way of modify the
> security (ACL) for
> >an OU or another container.
> >
> >Have a look at Add workstations to domain policy:
> >http://www.microsoft.com/resources/documentation/windows/x
> p/all/proddocs/en-us/526.mspx
> >
> >-- 
> >Regards
> >Christoffer Andersson
> >
> >No email replies please - reply in the newsgroup
> >------------------------------------------------
> >http://www.chrisse.se - Active Directory Tips
> >
> >"joh" <anonymous@discussions.microsoft.com> skrev i
> meddelandet
> >news:220dd01c45d48$1f962aa0$a601280a@phx.gbl...
> >> Hi All,
> >>
> >> I have a user account that I would like to be able to
> add
> >> computers to the domain, but not have admin rights. I
> have
> >> used the Delegate Control wizard to give the user these
> >> permissions but its not working as I expected. For
> >> example, the user can add computers to the domain, but
> say
> >> for instance, if there is another computer account in
> the
> >> directory with the same name, it fails. Using and admin
> >> account works. Also, when I try to add Mac OS X
> computers
> >> to the domain, it fails. Is there a permission that I
> >> haven't delegated? Also, is there a way to see exactly
> >> what permission has be delegated to a user?
> >>
> >> Thanks,
> >>
> >> Joh
> >
> >
> >.
> >


Relevant Pages

  • Re: Intra-Thread communication
    ... basically you create a delegate, a method with that signature and then from ... control in the form. ... procfilehandler = new ProcessedFileHandler; ... > box back in the Winform. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Intra-Thread communication
    ... basically you create a delegate, a method with that signature and then from ... control in the form. ... procfilehandler = new ProcessedFileHandler; ... > box back in the Winform. ...
    (microsoft.public.dotnet.framework)
  • Re: Intra-Thread communication
    ... basically you create a delegate, a method with that signature and then from ... control in the form. ... procfilehandler = new ProcessedFileHandler; ... > box back in the Winform. ...
    (microsoft.public.vsnet.general)
  • Re: advanced question: feasability of using delegates on original obje
    ... why not take a look at some of the "AJAX" ... and adds this to the control render: ... But there's one problem - delegate accumulation. ... objects or session into a state where calling delegates / accessing the ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: Delegated permission to add computers
    ... Allow - groupName - Full Control - Computer Objects ... You can also delegate this using the wizard; you just need to add computer ... "Jeff" wrote: ... Am I missing a permission somewhere? ...
    (microsoft.public.windows.server.active_directory)