RE: Users adding workstations to the domain

I have only "Administrators" listed for the above mentioned policy and
Authenticated Users are still able to add workstations to the domain.

Not sure where to go from here.

""Jenny wu [MSFT]"" wrote:

Hi Dave,

Thanks for using the SBS newsgroup.

From your description, I understand that you want to control user's
permissions to join workstation to domain. If I am off base, please don't
hesitate to let me know.

Do you mean the policy:

Default Domain Controllers Policy\Computer Configuration\Windows
Settings\Security Settings\Local Policies\User Right Assignment\Add
workstations to domain

Yes, you can do that. If you don't want to grant some users permissions to
some policy, you can move them from permission list. And please ensure the
users can not belong any groups that has the permission, for example, the
"Authenticated users" includes all domain users, so please ensure you do
not add the Domain users to the policy.

Hope above information helps! If you have further question on the issue
please let me know. I am happy to be of assistance to you-)!

Have a nice day!

Sincerely,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
From: "Dave Taylor" <noemail@xxxxxxxxx>
Subject: Users adding workstations to the domain
Date: Wed, 11 Jan 2006 11:56:55 -0000
Lines: 11
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
X-RFC2646: Format=Flowed; Original
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
Message-ID: <O#S2fYqFGHA.516@xxxxxxxxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: 62-249-231-10.no-dns-yet.enta.net 62.249.231.10
Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15.phx.gbl
Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.sbs:235760
X-Tomcat-NG: microsoft.public.windows.server.sbs

All,

I have a user that has added a personal computer to the network which they
should not have done. Can I remove the "authenticated users" from the gpo
that says who can add computers to the domain with out causing problems
later?

TIA
Dave





.

Relevant Pages

  • Re: Intermittant GPO failure to apply
    ... Nick ... > Windows cannot query for the list of Group Policy objects. ... > Network Client digitally sign communications: ... >> For the attachments, it should be the problem of our newsgroup server, I ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy and password changing
    ... Thank you for posting in the SBS newsgroup. ... Will the VPN users get a warning about the required password change? ... Cached Credentials are used to allow users to logon locally after the ... the password policy is at domain level. ...
    (microsoft.public.windows.server.sbs)
  • Re: Workstations are going offline! Help!
    ... This is what I would do: keep an eye on those workstations to make sure ... Settings -> Security Settings and click Password Policy. ... won't start, or if you're seeing any symptoms, please check your event logs ... When offline files are in use and you are offline (but still ...
    (microsoft.public.windows.server.sbs)
  • Re: Workstations are going offline! Help!
    ... This is what I would do: keep an eye on those workstations to make sure ... Settings -> Security Settings and click Password Policy. ... won't start, or if you're seeing any symptoms, please check your event logs ... When offline files are in use and you are offline (but still ...
    (microsoft.public.windows.server.sbs)
  • Re: When will password policy take effect
    ... thank you for using Microsoft newsgroup. ... | password didn't meet the new policy was forced to change their password ... Check the user account: ...
    (microsoft.public.windows.server.sbs)