thanks guys,

I don't want to give the right to create computer accounts, just to use
them.  I like (1) but it's not gonna work if I script the account
creation.
Does anyone know what the corresponding DACL settings on the computer
account in AD for this are?

-----Original Message-----
From: Edgington, Jeffrey [mailto:[EMAIL PROTECTED]]
Sent: Thursday, November 29, 2001 11:55 AM
To: NT 2000 Discussions
Subject: RE: Creating computer accounts in AD


I believe there are several ways to do this...

1.  when you go to create the computer object the first panel (where you
give it a name) also has who has the right to add that specific
computer...
choose there.

2.  If you are looking to give a specific ID the right to add many
computers... you will need to grant 'Create Computer Objects' and
'Delete
Computer Objects' rights to a specific ID for the container or OU that
you
want the computers to be created in.

I'm sure there are other ways as well.

jeff e.



-----Original Message-----
From: Alexander Kha Do [mailto:[EMAIL PROTECTED]] 
Sent: Thursday, November 29, 2001 12:37 PM
To: NT 2000 Discussions
Subject: Creating computer accounts in AD


If I want to create computer accounts in AD (as an Administrators
member),
what permissions do I need to set the computer so that another account,
say
called "image" will be able to join the domain using that computer
account?

I want to preregister computer accounts in certain OU's, then have
certain
people bring up their W2K Pro computers under these accounts.

-Alex

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to