How do I setup so that user can join computers to domain but not as domain admin

Tech-Archive recommends: Fix windows errors by optimizing your registry

I am looking to have a user be able to join computers to the domain but not
be able to be a part of the Domain Admin Group.

This will also require that the user have Admin Rights on the computer when
logged into the network (this is the tricky part).

Any suggestions would be helpful.


.

Relevant Pages

  • Re: You Have Exceeded the Maximum Number of Computer Accounts
    ... > The MSKB article 314462 discusses the problem: "You Have> Exceeded the Maximum Number of Computer Accounts" Error> Message When You Try to Join a Windows XP Computer to a> Windows 2000 Domain. ... Why would I ever want non-admins to be> able to join computers to the domain? ... For this one OU I want a non domain admin to be able to> add as many computers to the domain as required. ...
    (microsoft.public.windows.server.general)
  • Re: Security best practice help!!! local admin addition!
    ... Phil ... Domain administrators need to run backup software across the network ... Where is that Domain Admin password stored now? ... >> members of the local administrators group!!! ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Direct Access to SBS from Client Computer
    ... Does the user have domain admin or local admin permissions? ... Merv Porter [SBS-MWP] ... Change button) to join the network again. ... What's the best way to setup the client computer to be able to ...
    (microsoft.public.windows.server.sbs)
  • RE: User able to create folders on network drive he had no permission
    ... setup for him on the network was able to create files and folders on ... a network drive he should only have had read access to. ... The PC was setup using a domain admin account (I know, ... to assign permissions to specific groups. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User able to create folders on network drive he had no permission
    ... setup for him on the network was able to create files and folders on ... a network drive he should only have had read access to. ... The PC was setup using a domain admin account (I know, ... difference with the *user* permissions on the network. ...
    (microsoft.public.windowsxp.security_admin)