The answer is "no". In Active Directory Users and Computers, you "Delegate Control". Select the domain or OU and right click. The first option in the list should be "Delegate Control".
You may want to audit object creation also on your DCs to gain a better idea of who and what is being created on your network. It was a good thing that last admin left, sounds like he/she wasn't very good in practicing prudent administration duties. Cheers, Leonard Lee -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alexander Kha Do Sent: Tuesday, March 19, 2002 6:44 PM To: NT 2000 Discussions Subject: Creating Domain Computer accounts Is it in the default domain policy where you specify who has rights to create new computer accounts in the domain??? The reason I'm asking is that our last admin allowed all authenticated users to do this and he has since left ... we of course want to change this to a specific group of people (i.e. tech staff) so that no bozos plug into our network and create rogue workstations. Thanks, Alex ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
