RE: Joining a server to the domain

From: Denis Wong _at_ Hong Kong (_at_)
Date: 11/16/04

  • Next message: Mark Renoden [MSFT]: "Re: Loopback Processing and Deny Apply in ACL" 
    Date: Mon, 15 Nov 2004 17:52:02 -0800

    Pls see this.

    Domain Users Cannot Join Workstation or Server to a Domain
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;251335

    BR,
    Denis

    "Amit Zinman" wrote:

    > Hi,
    > Most of our users use Windows 2000 or 2003 server as their operating system.
    > We want to delegate the ability to add these servers to the domain. However,
    > it seems that the "add workstations to the domain" right is not sufficient.
    > Does anyone know how to delegate adding servers to the domain?
    >
    > Amit
    >
    >
    >

  • Next message: Mark Renoden [MSFT]: "Re: Loopback Processing and Deny Apply in ACL"

    Relevant Pages

    • Joining a server to the domain
      ... Most of our users use Windows 2000 or 2003 server as their operating system. ... We want to delegate the ability to add these servers to the domain. ...
      (microsoft.public.win2000.group_policy)
    • Re: 4 part domain names
      ... I tend to use djbdns for DNS servers, ... These name servers delegate ... authority for zones within their zones to yet more name servers. ...
      (freebsd-questions)
    • Re: IMPACT of (Delegation Control of Group Policy) on Active Directory
      ... and that can be ANYTHING like client, servers and even DCs. ... I would not delegate ... directory that could result from delegating control of group policy ... who is only responsible for desktops and laptops (SUPPORT Engineer). ...
      (microsoft.public.windows.server.active_directory)
    • Re: Authenticating to LDAP using a HTTP ticket
      ... 0x02 TcpSupported Indicates that this realm supports TCP. ... 0x04 Delegate Everyone in this realm is trusted for delegation ... Microsoft checks the OK-AS-DELEGATE Kerberos ticket flag, ... will set for trusted servers. ...
      (comp.protocols.kerberos)
    • Re: Reverse lookup zones
      ... "Ed Horley" wrote: ... > changed the IP addresses of your public name servers and the lookup is ... >>> or ask to delegate the block to you (getting this done depends on your ... >>> Ace ...
      (microsoft.public.windows.server.dns)