Huh? By default normal users can add 10 workstations to a domain... http://support.microsoft.com/kb/251335/EN-US/ http://support.microsoft.com/default.aspx?scid=kb;en-us;243327
********************** Charlie Kaiser MCSE, CCNA Systems Engineer Essex Credit / Brickwalk 510 595 5083 ********************** > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Riley > Sent: Friday, July 01, 2005 8:51 AM > To: [email protected] > Subject: Re: [ActiveDir] Permission to Join a pc to domain. > > That said, regular old users don't have the ability to add > machines to the > domain on their own. > > andrew > > --On Friday, July 01, 2005 5:27 PM +0200 TIROA YANN > <[EMAIL PROTECTED]> wrote: > > > Hi, > > > > Just a information... > > > > I have denied all users (authenticated users) to join > computer in the > > domain thanks to the "Default Domain Controler Policy" GPO, and that > > work fine. I do this to avoid authenticated users to create > PCs in the > > "Computers" container, and force admin to manage their own > computers, > > that is to say create and join to domain. > > > > So i grant each admin Full Control of their OU and childs objects, > > because they also need such rights to manage others objects. > > Admin can then create their Computers object in their OU, but my > > question is: are they able and have the rights to join their own > > computer to domain ? > > > > By default, when they create the computer objects in their OU, the > > wizard says "The following group or user can join this computer to a > > domain" and this is by default Domain Admins group..... > > > > Thanks > > > > Cheers, > > > > Yann > > > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
