How to give rights for computer account creation

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Gene (dsias_at_nospam.hotmai.com)
Date: 06/09/04 

Date: Wed, 9 Jun 2004 09:18:51 -0500

I would like to give rights to a user to create computer accounts in the
domain. All they can do is join a computer to a domain. I believe there is
Account operators group but is there something with less permissions.

thanks,
Gene

Relevant Pages

  • Re: admin right applied at OU
    ... > Is there a way to give a user, OU Admin rights? ... For you example with computer accounts in an OU, delegated permissions ...
    (microsoft.public.windows.server.active_directory)
  • Re: admin right applied at OU
    ... >> Is there a way to give a user, OU Admin rights? ... >> Delegation of Athority in AD work to apply the rights, ... >For you example with computer accounts in an OU, ...
    (microsoft.public.windows.server.active_directory)
  • Re: I need help with configuring GP?
    ... a Windows 2003 environment to give rights to a "limited Admin person" to be able to create email enabled user & computer accounts, as well as delete these same records at the OU level only. ... You wouldn't do that with Group Policy, as Group Policy always triggers sort of client machines. ... That opens a wizard that will help you grant those people appropriate rights. ... Microsoft MVP - Windows Server - Group Policy. ...
    (microsoft.public.windows.group_policy)
  • Delegating Administrative rights to OUs
    ... We would like to allow our desktop support staff the rights to manage ... when new computer accounts are created they are installed by ... default in the Computers container at he root of the domain. ...
    (microsoft.public.win2000.active_directory)
  • Re: Error message in site component manager
    ... I grant that group access rights to that container, as well as put that group in the local groups necessary on all SMS Site Servers. ... The contents of that ad group are the computer accounts of all my SMS Servers. ... You will need to reboot your SMS Servers at least once after adding it's computer account to this group; but from then on, whenever I need to do a lease return or need a new site, I just add the computer account into the group; add the group into the new computer's local groups; and I can essentially forget about rights. ...
    (microsoft.public.sms.setup)