If you don't want to use RIS, the only other way I know is to use a Script to
precreate the Computer objects FIRST before actually joining them to the
Domain. In the Script you can specify exactly where the object will be
created. You then set ACL on the created object to specify who can do the
actual joining.
 
HTH
 
Sincerely,

D�j� Ak�m�l�f�, MCSE MCSA MCP+I
www.akomolafe.com
www.iyaburo.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon

________________________________

From: [EMAIL PROTECTED] on behalf of Todd Povilaitis
Sent: Wed 7/30/2003 8:15 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] default computer account directory location



Alternatively, if you are using Remote Installation Service to create your
OS(es), you can specify the target location for newly created machines in
your RIS configuration.

__________________
Todd Povilaitis
LAN Administrator
Huntington Hospital
[EMAIL PROTECTED]
Phone: (626) 397-3392
Fax: (626) 397-2901


-----Original Message-----
From: Tony Murray [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 30, 2003 07:10
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] default computer account directory location


I don't believe there is an easy way to do this in Windows 2000 AD.

The following article explains how to do this in Windows Server 2003 AD.

http://support.microsoft.com/default.aspx?scid=kb;[LN];324949

At the end of the article it shows where the wellKnownObjects attribute of
the domainDNS object for the domain can be modified.  You might be able to do
this modification manually in Windows 2000 AD using LDP or ADSIEdit.  You
would need to replace the value for the default computers location, i.e.

B:32:AA312825768811D1ADED00C04FD8D5CD:CN=Computers,DC=domain,DC=com;

with, for example....

B:32:AA312825768811D1ADED00C04FD8D5CD:OU=Workstations,DC=domain,DC=com;

I haven't tried this and it's probably unsupported!  So don't take my word
for it.  Give it a go in your test lab if you want and let us know how you
get on.

Tony

---------- Original Message ----------------------------------
From: "Graham Turner" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date:  Wed, 30 Jul 2003 14:30:35 +0100

is there any way to change using a domain setting the default container into
which computer account objects are created for a windows 2000 domain. ??

GT



List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


<<winmail.dat>>

Reply via email to