RE: [ActiveDir] Joining Computers to a Domain

[Adams, Kenneth W \(Ken\)]

Title: Message

Yes, you can set permissions on individual accounts to permit only adding computers to the domain.  The way I've done it is to set the permissions on the OU that will contain the computers.  Open that OU's properties, go to the Security tab, add the user's ID, then set the permissions for the user's ID to add computers.   I highly recommend creating a group that contains the user IDs of all such people, then add the group to the OU's permissions and set the group's permissions to add computers.  The use of the group allows easier admin to add or remove people from the ability to add computers. Ken Adams -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Edwin Sent: Tuesday, August 24, 2004 8:01 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Joining Computers to a Domain I believe that I have read something like this before but now that I need it, I cant find the answer.   I would like to be able to have a non-admin user with permissions of nothing more than being able to add a computer to a domain.  Is this possible?   Thank you for your responses.   Edwin