Re: AD Delegates

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

see:

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"cbass" <cbass@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DDCFAE1C-7151-4DFA-A992-0E5F0C76B74C@xxxxxxxxxxxxxxxx
I would like to allow a user to only join computers to the domain.
Currently
I granted the user create computer objects, but they are able to
disable/delete any computer object they create (but cannot disable/delete
objects they did not create which is good). Is there a way to allow the
user
to only join a computer to the domain w/out the ability to disable/delete?



.

Relevant Pages

  • Re: AD Delegates
    ... # Jorge de Almeida Pinto # MVP Windows Server - Directory Services ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... I granted the user create computer objects, ... disable/delete any computer object they create (but cannot disable/delete ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cleanup Old Computer Objects
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... * This posting is provided "AS IS" with no warranties and confers no rights! ... Always test ANY suggestion in a test environment before implementing! ... How do I search for Computer objects which have not been active in X days? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate user to add/remove computers to specified OU
    ... do you want to delegate the movement of computer objects between OUs? ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... * This posting is provided "AS IS" with no warranties and confers no rights! ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permissions to create computer objects and join domain.
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ... to allow members of a group permissions to join domain by pre creating ... Create / Delete Computer Objects ...
    (microsoft.public.windows.server.active_directory)
  • Re: delegate control
    ... although the user is able to create the computer objects, that same user is still able to delete all the computers accounts that he/she created because he./she is the owner. ... The owner by default is able to change permissions and therefore do anything with the object. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Always test ANY suggestion in a test environment before implementing! ...
    (microsoft.public.windows.server.active_directory)