Yeah, I'll just retract that previous idiotic statement...
--On Friday, July 01, 2005 9:38 AM -0700 Charlie Kaiser
<[EMAIL PROTECTED]> wrote:
Huh? By default normal users can add 10 workstations to a domain...
http://support.microsoft.com/kb/251335/EN-US/
http://support.microsoft.com/default.aspx?scid=kb;en-us;243327
**********************
Charlie Kaiser
MCSE, CCNA
Systems Engineer
Essex Credit / Brickwalk
510 595 5083
**********************
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andrew Riley
Sent: Friday, July 01, 2005 8:51 AM
To: [email protected]
Subject: Re: [ActiveDir] Permission to Join a pc to domain.
That said, regular old users don't have the ability to add
machines to the
domain on their own.
andrew
--On Friday, July 01, 2005 5:27 PM +0200 TIROA YANN
<[EMAIL PROTECTED]> wrote:
> Hi,
>
> Just a information...
>
> I have denied all users (authenticated users) to join
computer in the
> domain thanks to the "Default Domain Controler Policy" GPO, and that
> work fine. I do this to avoid authenticated users to create
PCs in the
> "Computers" container, and force admin to manage their own
computers,
> that is to say create and join to domain.
>
> So i grant each admin Full Control of their OU and childs objects,
> because they also need such rights to manage others objects.
> Admin can then create their Computers object in their OU, but my
> question is: are they able and have the rights to join their own
> computer to domain ?
>
> By default, when they create the computer objects in their OU, the
> wizard says "The following group or user can join this computer to a
> domain" and this is by default Domain Admins group.....
>
> Thanks
>
> Cheers,
>
> Yann
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
