Re: Computer Account Creation

see:
http://blogs.dirteam.com/blogs/jorge/archive/2006/01/05/369.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Vikrant" <vikrant_nath(remove this part)@hotmail.com> wrote in message
news:uKVKeSUPHHA.4244@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a windows active directory environment.
How can I delegate some users to add / join computers to the domain. I
don't want them to act as domain admin.

Have done the following:
Created 2 users
Created a group :- ADMIN
Added the members
Delegated them full rights on the Computer object of the active directory.

While from a workgroup workstation, they try to join that computer to the
domain they get an error saying access denied.
How can I get rid of this problem? How can I allow those 2 users to join/
add computers in the domain without giving them domain admin privileges.

Please help
--
Regards and Thanks

Vik




.

Relevant Pages

  • Re: Merging AD
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... There are very few users and computers that will need to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Join domain with access deny using domain user
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... using the domain admin then they wont have any problem on that..I have ...
    (microsoft.public.windows.server.active_directory)
  • Re: Stale Computer objects
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... I looked in the AD Users and Computers and it looks like the computers are ...
    (microsoft.public.windows.server.active_directory)
  • Re: Join Client PC to domain without domain admin right
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... domain after PC setup and meanwhile not giving him domain admin right. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Naming restrictions for users ?
    ... Using non-English characters for national language ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... naming conventions for computers, ...
    (microsoft.public.win2000.active_directory)