Re: group policy

Use the Delegation of Control Wizard, and delegate the permission to create
only computer objects within the specific OU you're concerned with. "Add
workstations to domain" will not resrict the user to only a particular OU.

Here's a walk-through from the MS site to get you started:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/ctrlwiz.mspx

HTH


--
Laura E. Hunter: MVP Windows Server - Networking
All replies to newsgroup, please
Post provided as-is, no warranties expressed or implied

"arzu" <polarzu@xxxxxxxxx> wrote in message
news:%23rETJNsEGHA.532@xxxxxxxxxxxxxxxxxxxxxxx
> How can i give permission to a spesific user for joining workstations
> "only under one OU" to domain. i tried creating in this OU and giving "add
> workstation to domain" permission but it didn't work.
>


.

Relevant Pages

  • Re: Give a user rights to add machine to domain, not 10 limit
    ... The option in user rights assignment called "Add workstations to the domain" ... Directory has different containers where computer accounts can reside, ... a container by container basis. ... You can use the delegation of control wizard to allow creation of new ...
    (microsoft.public.windows.server.general)
  • Re: Give a user rights to add machine to domain, not 10 limit
    ... The option in user rights assignment called "Add workstations to the domain" ... Directory has different containers where computer accounts can reside, ... a container by container basis. ... You can use the delegation of control wizard to allow creation of new ...
    (microsoft.public.windows.server.active_directory)
  • Re: Give a user rights to add machine to domain, not 10 limit
    ... The option in user rights assignment called "Add workstations to the domain" ... Directory has different containers where computer accounts can reside, ... a container by container basis. ... You can use the delegation of control wizard to allow creation of new ...
    (microsoft.public.windows.server.security)
  • Re: Joining Computers to Domain
    ... password of the new user that I delegated the permission to. ... >>"preset delegation task" for "Joining computer to the ... >>Derek Melber ... >>> Also, an afterthought on my personal user account, ...
    (microsoft.public.windows.group_policy)
  • Re: permissions in active directory
    ... Then the users need a domain user account to access the shares on the DC. ... Better join the machines to the domain and configure user accounts and dsiable the local machine accounts, move all data from workstations to the server and configure a share security regarding to the needs of your company structure. ... What share permission and what NTFS permission did you configure? ...
    (microsoft.public.windows.server.active_directory)