Re: Joining Computers to Domain

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 03/15/04 

Date: Mon, 15 Mar 2004 15:02:58 -0700

Alan,

what file is it for? 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Alan Price" <anonymous@discussions.microsoft.com> wrote in message
news:abb001c40ad8$87d56760$a601280a@phx.gbl...
> We delegated compuer objects creation.  It's a Custom task
> beaucse it didn't allow for a Common task and when we
> delegated that option, it used a wizard.  Any ideas?
> Also, an afterthought on my personal user account,
> whenever I click a shortcut it ask's if I'm sure I want to
> open the file (it's a file download prompt like in IE).
> The "Show tis message everytime" box i greyed out and
> checked.  How do I fix this?
>
> >-----Original Message-----
> >Alan,
> >
> >What delegation did you give the user account?
> >
> >-- 
> >Derek Melber
> >BrainCore.Net
> >derekm@braincore.net
> >"Alan Price" <anonymous@discussions.microsoft.com> wrote
> in message
> >news:dd0601c40ad1$bbb37740$a101280a@phx.gbl...
> >> I gave the idea below a try, but it didn't work.  Does
> >> anybody else (or Derek) have any ideas?  If you need
> >> specifics, let me know.
> >>
> >> >-----Original Message-----
> >> >Alan,
> >> >
> >> >I assume you mean that you have given the group
> the "Add
> >> workstations to
> >> >domain" user right? Well, this is not necessary in AD.
> >> You can get by with
> >> >just delegating permissions to create computer objects
> in
> >> the OU where the
> >> >admin needs to join the computer to the domain. So,
> this
> >> gives you more
> >> >granularity and ultimate control.
> >> >
> >> >Does this make sense?
> >> >
> >> >-- 
> >> >Derek Melber
> >> >BrainCore.Net
> >> >derekm@braincore.net
> >> >"Alan Price" <anonymous@somedomain.tld> wrote in
> message
> >> >news:b37501c40794$1dfb28d0$a401280a@phx.gbl...
> >> >> We have several groups with specific rights set up on
> >> our
> >> >> server.  We want to give a group of administrators
> the
> >> >> right to join workstations to the domain.  We have
> >> enabled
> >> >> this right in Group Policy, but it is not working.
> The
> >> >> group members cannot join the computers to the
> domain.
> >> >> For user reasons, the admins are also in a different
> >> group
> >> >> with more restrictions.  Could a restriction in this
> >> group
> >> >> be cancelling out the right to join computers?  If
> so or
> >> >> possible, where would it be?  We have tried moving
> the
> >> >> admin group up in the hierarchy of rights management,
> >> but
> >> >> that didn't help.  Any ideas?  If you need any
> >> specifics,
> >> >> let me know.
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: Joining Computers to Domain
    ... It's a Custom task ... >What delegation did you give the user account? ... >Derek Melber ... >> specifics, let me know. ...
    (microsoft.public.windows.group_policy)
  • Re: Joining Computers to Domain
    ... password of the new user that I delegated the permission to. ... >>"preset delegation task" for "Joining computer to the ... >>Derek Melber ... >>> Also, an afterthought on my personal user account, ...
    (microsoft.public.windows.group_policy)
  • Re: Enable non-admin users to access member servers or client PC
    ... But i just hit with an issue on delegation. ... I've given FULL right via delegation for Helpdesk to modify user account ... Enable Restricted Groups for Remote Desktop Users group ...
    (microsoft.public.windows.server.active_directory)
  • Re: Joining Computers to Domain
    ... What delegation did you give the user account? ... >>admin needs to join the computer to the domain. ... >>Derek Melber ... >>> We have several groups with specific rights set up on ...
    (microsoft.public.windows.group_policy)
  • Re: Delgate Control Problem...
    ... That will tell us exactly what permissions ... Added a user account to that group called PwdTest ... >> Called DELEGATION TEST OU ... >> be able to Reset Passwords and Force Change of PWD at ...
    (microsoft.public.windows.server.active_directory)