Re: Delegating permissions

From: Darren Mar-Elia (fermentedgrape_at_yahoo.com)
Date: 03/26/04 

Date: Fri, 26 Mar 2004 13:50:56 -0800

You should be able to just grant that group the "Create Computer Objects"
right on the OU.

"Jon Paskett" <paskettj@NO.SPAM.email.com> wrote in message
news:u6JJB41EEHA.3180@TK2MSFTNGP12.phx.gbl...
> OS = Windows Server 2003
>
> I need to delegate permission to a group of users to add computers to
their
> OU only. Creating a custom task allowing Object Type = Computer Objects,
> Create/Delete objects with Full Control Permission in the custom
delegation
> wizard. However, this does not allow group members to add
> the computer to the domain. AD says user does not have permission.
>
> TIA
>
> Jon
>
>
>

Relevant Pages

  • Re: Delegated permission to add computers
    ... This setup was initially done using the delegated control wizard. ... Right now the group has the following permission: ... I am going to try to add Full Control permissions on computer objects to see ... Jeff ...
    (microsoft.public.windows.server.active_directory)
  • Re: Computer Objects
    ... DELETE on the object being moved or DELETE_CHILD on the source container ... > I am trying to find the correct permission to delegate the authority to MOVE ... > delete computer objects is available per OU, but I would also like delegate ...
    (microsoft.public.win2000.active_directory)
  • Re: DSACLS and joining a domain
    ... Create computer objects is an special permission in Active Directory that ... user does not need that user right if they have the create computer objects ... >> I believe the user only needs create computer objects to join computers ...
    (microsoft.public.win2000.security)
  • Re: Delegating permission to add computers to the domain
    ... One minor change to Step 7.... ... Instead of Editing the Existing rights, Add the user or group again to the ... In the end they will have "Create Computer Objects" and "Delete Computer ... > I need to delegate permission to a group of users to add computers to the ...
    (microsoft.public.windows.server.active_directory)
  • Delegating permissions
    ... OS = Windows Server 2003 ... I need to delegate permission to a group of users to add computers to their ... Creating a custom task allowing Object Type = Computer Objects, ...
    (microsoft.public.windows.group_policy)