Hi,
 
Using the delegation of control wizard assign a group of your choice the custom task "Add and/or join a computer to the domain in an OU". Before doing that adjust [template6] with the text below which delegates the right to create computer accounts and delegates the right to join a computer when a computer account has been pre-created. You could split both tasks!
 
 
[template6]
AppliesToClasses = domainDNS,organizationalUnit,container
 
Description = "Add and/or join a computer to the domain in an OU"
 
ObjectTypes = SCOPE, computer
 
[template6.SCOPE]
;Right to create computer objects
computer=CC
 
[template6.computer]
;Right to join computers to domain with pre-created computer account
CONTROLRIGHT= "Reset Password","Validated write to DNS host name","Validated write to service principal name", "Account Restrictions"
 
 
 
After that you can use NETDOM or th GUI to join the computer to the domain
 
 
BY THE WAY: test this first to see if it meets your needs!
 
Jorge
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Noah Eiger
Sent: Friday, April 08, 2005 23:23
To: [email protected]
Subject: [ActiveDir] Netdom to Join

Hi –

 

What are the minimum credentials that a user needs to join a computer to the domain when the computer account is already created? I am trying to script netdom to do this and getting denied if the user has less than administrative access.

 

Thanks.

 

-- nme


This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

Reply via email to