RE: [ActiveDir] Permission to Join a pc to domain.

2005-07-02 Thread Almeida Pinto, Jorge de
Hi, Using the delegation of control wizard you can delegate the creation of computer accounts to the domain. This does not mean the same user/group can also JOIN the computer to the domain. In the DELEGWIZ.INF file (%WINDIR%\INF) look at template 6. By default the AppliesToClasses is set

Re: [ActiveDir] Permission to Join a pc to domain.

2005-07-01 Thread Andrew Riley
Since a DENY takes precedence over an ALLOW, denying Authenticated Users a right means that no matter what allow rights you set for an individual user, they will never be allow to perform that action. That said, regular old users don't have the ability to add machines to the domain on their

RE: [ActiveDir] Permission to Join a pc to domain.

2005-07-01 Thread Charlie Kaiser
Huh? By default normal users can add 10 workstations to a domain... http://support.microsoft.com/kb/251335/EN-US/ http://support.microsoft.com/default.aspx?scid=kb;en-us;243327 ** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083

RE: [ActiveDir] Permission to Join a pc to domain.

2005-07-01 Thread Andrew Riley
Yeah, I'll just retract that previous idiotic statement... --On Friday, July 01, 2005 9:38 AM -0700 Charlie Kaiser [EMAIL PROTECTED] wrote: Huh? By default normal users can add 10 workstations to a domain... http://support.microsoft.com/kb/251335/EN-US/