RE: Minimum permission needed for an a/c to join Workstations to AD Do



"All-in-one" wrote:

> I have made up some OU Management accounts who can manage accounts under
> particular OUs. Also, I would like these accounts capable to join
> workstations to AD domain. However, I don't want to grant these OU management
> accounts with Administrators rights.
>
> What has been done:
> In Domain Controller Security Policy, Security Settings->Local
> Policies->User Rights Assignment, already included these OU management
> accounts into "Add workstations to domain". However, still no luck. Do I miss
> out something?
>
> Thanks a lot!

With the security settings as suggested, it works now! Thank you very much,
pals!!!
.

Relevant Pages

  • Logical access controle to network segments and boxes
    ... We are currently setting up a security management system (or, ... I want to use AAA where possible and local accounts where needed. ... Reporting on usage of these accounts is an issue, since central logging ...
    (Security-Basics)
  • Writing a logical access control document....
    ... We are currently setting up a security management system (or, ... tools and so on and will focus on an admin account per admin. ... I want to use AAA where possible and local accounts where needed. ... Reporting on usage of these accounts is an issue, since central logging is ...
    (comp.security.misc)
  • RE: Minimum permission needed for an a/c to join Workstations to AD Do
    ... If you set the security settings at Default Domain Policy then thing should ... > I have made up some OU Management accounts who can manage accounts under ... I don't want to grant these OU management ...
    (microsoft.public.windows.server.active_directory)
  • Re: P&L Question
    ... It is many years since I worked in management accounts but I was roped into ... Do you mean that you have a management charge and filing fee as ...
    (uk.finance)
  • Re: external server authentication and licensing
    ... have any trouble with active directory, ... from having all the accounts in active directory... ... ongoing management of large numbers of accounts in the FM files ... SBS to Standard server, and purchasing the External Connector license, ...
    (comp.databases.filemaker)
Loading