Re: Joining Computers to Domain

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Alan Price (anonymous_at_discussions.microsoft.com)
Date: 03/15/04 

Date: Mon, 15 Mar 2004 13:57:38 -0800

We delegated compuer objects creation. It's a Custom task
beaucse it didn't allow for a Common task and when we
delegated that option, it used a wizard. Any ideas?
Also, an afterthought on my personal user account,
whenever I click a shortcut it ask's if I'm sure I want to
open the file (it's a file download prompt like in IE).
The "Show tis message everytime" box i greyed out and
checked. How do I fix this?

>-----Original Message-----
>Alan,
>
>What delegation did you give the user account?
>
>--
>Derek Melber
>BrainCore.Net
>derekm@braincore.net
>"Alan Price" <anonymous@discussions.microsoft.com> wrote
in message
>news:dd0601c40ad1$bbb37740$a101280a@phx.gbl...
>> I gave the idea below a try, but it didn't work. Does
>> anybody else (or Derek) have any ideas? If you need
>> specifics, let me know.
>>
>> >-----Original Message-----
>> >Alan,
>> >
>> >I assume you mean that you have given the group
the "Add
>> workstations to
>> >domain" user right? Well, this is not necessary in AD.
>> You can get by with
>> >just delegating permissions to create computer objects
in
>> the OU where the
>> >admin needs to join the computer to the domain. So,
this
>> gives you more
>> >granularity and ultimate control.
>> >
>> >Does this make sense?
>> >
>> >--
>> >Derek Melber
>> >BrainCore.Net
>> >derekm@braincore.net
>> >"Alan Price" <anonymous@somedomain.tld> wrote in
message
>> >news:b37501c40794$1dfb28d0$a401280a@phx.gbl...
>> >> We have several groups with specific rights set up on
>> our
>> >> server. We want to give a group of administrators
the
>> >> right to join workstations to the domain. We have
>> enabled
>> >> this right in Group Policy, but it is not working.
The
>> >> group members cannot join the computers to the
domain.
>> >> For user reasons, the admins are also in a different
>> group
>> >> with more restrictions. Could a restriction in this
>> group
>> >> be cancelling out the right to join computers? If
so or
>> >> possible, where would it be? We have tried moving
the
>> >> admin group up in the hierarchy of rights management,
>> but
>> >> that didn't help. Any ideas? If you need any
>> specifics,
>> >> let me know.
>> >
>> >
>> >.
>> >
>
>
>.
>

Relevant Pages

  • Re: Joining Computers to Domain
    ... It's a Custom task ... > Also, an afterthought on my personal user account, ... >>What delegation did you give the user account? ... >>Derek Melber ...
    (microsoft.public.windows.group_policy)
  • Re: AD Data Entry
    ... > Use the Delegation of Control Wizard. ... Create a custom task that will assign ...
    (microsoft.public.win2000.active_directory)
  • Re: Delegate user to add/remove computers to specified OU
    ... Use Delegation of Control Wizard (initiated from the computer OU level in ... ADUC), pick the "Create a custom task to delegate" option, followed by "Only ... objects in this folder" and "Delete selected objects in this folder" ... Note that you will need to ensure that newly added computer accounts target ...
    (microsoft.public.windows.server.active_directory)
  • Re: Joining Computers to Domain
    ... What delegation did you give the user account? ... >>admin needs to join the computer to the domain. ... >>Derek Melber ... >>> We have several groups with specific rights set up on ...
    (microsoft.public.windows.group_policy)