Re: Delegated permission to add computers

From: Jeff (jeffpoling_at_yahoo.com)
Date: 01/10/05 

Date: Mon, 10 Jan 2005 12:27:12 -0600

Thanks for the ideas. . .

This setup was initially done using the delegated control wizard. But it
was done prior to upgrading the domain to Win2003.

Right now the group has the following permission:

Create/Delete Computer Objects

I am going to try to add Full Control permissions on computer objects to see
if that makes any difference.

Thanks,

Jeff

"Jeff" <jeffpoling@yahoo.com> wrote in message
news:%23AGKcry9EHA.3592@TK2MSFTNGP09.phx.gbl...
>I created a group in AD and delegated permission for that group to add
>computers to the default computer container. For some reason when a user
>in the group attempts to add a PC to the domain (via My COmputer |
>Properties), it returns an access denied error. What can I do to
>troubleshoot this? Everything looks correct in AD? Am I missing a
>permission somewhere?
>
> Thanks,
>
> Jeff
>

Relevant Pages

  • Re: Computer Objects
    ... DELETE on the object being moved or DELETE_CHILD on the source container ... > I am trying to find the correct permission to delegate the authority to MOVE ... > delete computer objects is available per OU, but I would also like delegate ...
    (microsoft.public.win2000.active_directory)
  • Re: DSACLS and joining a domain
    ... Create computer objects is an special permission in Active Directory that ... user does not need that user right if they have the create computer objects ... >> I believe the user only needs create computer objects to join computers ...
    (microsoft.public.win2000.security)
  • Re: Delegating permission to add computers to the domain
    ... One minor change to Step 7.... ... Instead of Editing the Existing rights, Add the user or group again to the ... In the end they will have "Create Computer Objects" and "Delete Computer ... > I need to delegate permission to a group of users to add computers to the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegating permissions
    ... You should be able to just grant that group the "Create Computer Objects" ... > I need to delegate permission to a group of users to add computers to ... Creating a custom task allowing Object Type = Computer Objects, ...
    (microsoft.public.windows.group_policy)