Re: Domain permissions

From: ptwilliams (ptw2001_at_hotmail.com)
Date: 10/06/04 

Date: Wed, 6 Oct 2004 21:35:36 +0100

By default, a user can add ten computers to the domain. To up this limit
you need to modify the ms_DS-MachineAccountQuota property using ADSIEdit.

To do this you must right-click and choose properties on a domain controller
(DC=dcName,DC=yourDomain,DC=com) under the domain (DC=yourDomain,DC=com)
value and then click attributes.

In the Select a Property to view drop-down list box, select
MachineAccountQuota.

In the Edit attribute text box, modify the value of 10 to whatever you want
and apply this value by pressing Set, and then OK.

Or you can delegate control to a set of users.

To do this, open the Active Directory Users and Computers Snap-in and
right-click on the container that you wish these users (this group) to be
able to add computers to and select Delegate Control. Press Next and you'll
reach the users and groups to delegate control to page; click the Add button
and add the users or groups that you wish to delegate this control to and
then click Next. 

-- 
Paul Williams
http://www.msresource.net
http://forums.msresource.net
______________________________________
"kevin" <kevin@discussions.microsoft.com> wrote in message 
news:03b501c4abe0$675479f0$a301280a@phx.gbl...
Does anyone know of a way to allow Techs to join & unjoin
a domain without making them domain admins in the
enterprise?  Any advice would be appreciated.