Re: How to stop all authenticated users from adding computers
- From: Meinolf Weber <meiweb(nospam)@gmx.de>
- Date: Mon, 21 Apr 2008 21:02:51 +0000 (UTC)
Hello Morris,
Check the default domain policy, default domain controller policy or equivalents
for the security right "ADD WORKSTATIONS TO DOMAIN". I assume Domain users
or Everyone are listed there.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
Currently anybody who has a user account can add computers to the
domain. I've been reading that there is a default config that allows
everyone to add 10 computers. I have went and changed the
"ms-DS-MachineAccountQuota" to 0 and that didn't fix it. Any help
would be appreciated. Thanks!
.
Relevant Pages
- Re: Permission Denied When Accessing COM+ Component as Plain Domain User on 2003
... If your W2k3 is now at SP1, have you reviewed the SP1 release ... Microsoft MVP (Windows Security) ... > - The workstations and the server are a part of an Active Directory set ... > In the event log I've got authentication sucesses for the domain users ...
(microsoft.public.win2000.security) - Re: How to stop all authenticated users from adding computers
... "Meinolf Weber" wrote: ... default domain controller policy or equivalents ... for the security right "ADD WORKSTATIONS TO DOMAIN". ... I assume Domain users ...
(microsoft.public.windows.server.active_directory) - Re: Default Domain Policy
... If you look at your default domain controller policy, ... It is the "managing audit and security log" user right. ... user rights assignments and security options sections before you restore. ...
(microsoft.public.windows.group_policy) - Local Policy Prevents Login Interactively
... Citrix server that was Win2K. ... server to BDC so that Terminal Services Licensing would ... Local Security Policy has Authenticated Users in: ... If I make a change to the Domain Controller Policy (it ...
(microsoft.public.win2000.group_policy) - cant login as domain user on XP without Domain Users in Local Adm
... is currently Domain Users are added to the Administrators group on the local ... allowed to log on interactively and refuses logon. ... I've checked the domain controller policy and domain policy to make sure ...
(microsoft.public.security) |
|
