Re: How to stop all authenticated users from adding computers

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance





"Meinolf Weber" wrote:

Hello Morris,

Check the default domain policy, default domain controller policy or equivalents
for the security right "ADD WORKSTATIONS TO DOMAIN". I assume Domain users
or Everyone are listed there.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Currently anybody who has a user account can add computers to the
domain. I've been reading that there is a default config that allows
everyone to add 10 computers. I have went and changed the
"ms-DS-MachineAccountQuota" to 0 and that didn't fix it. Any help
would be appreciated. Thanks!





I have checked these policies and only Domains Admins are listed. This is
really confusing me. Any other ideas?
.



Relevant Pages

  • Re: Rescuing corrupted Default Domain Controller Policy
    ... Disclaimer: This posting is provided "AS IS" with no warranties, ... ff16fb66833978ca331c97be2f9b@xxxxxxxxxxxxxxxxxxxx, "Meinolf Weber" ... Is there any way to repair the Default Domain Controller Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: Rescuing corrupted Default Domain Controller Policy
    ... looks like I will have to manually restore the settings:( ... ff16fb66833c38ca3323ab425adb@xxxxxxxxxxxxxxxxxxxx, "Meinolf Weber" ... I have some settings in the Computer ... Is there any way to repair the Default Domain Controller Policy ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to stop all authenticated users from adding computers
    ... default domain controller policy or equivalents for the security right "ADD WORKSTATIONS TO DOMAIN". ... I assume Domain users or Everyone are listed there. ...
    (microsoft.public.windows.server.active_directory)
  • Re: slow access xp clients on windows 2003 server
    ... But yesterday I configured 1 new workstation on our domain, the logon speed ... Workstations are 1 year old, only locale profile, not many policies. ... Beste regards. ... "Meinolf Weber" wrote: ...
    (microsoft.public.windows.server.networking)
  • Re: How to restrict access to a share by computer... not user or gr
    ... Best regards ... not from other workstations. ... "Meinolf Weber" wrote: ... deny access using computer in the security window, ...
    (microsoft.public.windows.file_system)