I stand correct...I actually did not know that. I imagine this would a cumulative number over the lifetime of the account. I could see how it would be useful in a company that may be short staffed. Good stuff, I love learning new things every day...
Which means you have to administrate the Active Directory ms-DS-MachineAccountQuota attribute also if you want to control authenticated users the ability to add workstations. Cheers, Leonard Lee -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Evans Chris - cevans Sent: Wednesday, March 20, 2002 8:58 AM To: NT 2000 Discussions Subject: RE: Creating Domain Computer accounts Actually in Windows 2000 authenticated users are allowed to add up to 10 workstations to the domain by default. More info in Q251335. -----Original Message----- From: Leonard Lee [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 20, 2002 6:56 AM To: NT 2000 Discussions Subject: RE: Creating Domain Computer accounts The answer is "no". In Active Directory Users and Computers, you "Delegate Control". Select the domain or OU and right click. The first option in the list should be "Delegate Control". You may want to audit object creation also on your DCs to gain a better idea of who and what is being created on your network. It was a good thing that last admin left, sounds like he/she wasn't very good in practicing prudent administration duties. Cheers, Leonard Lee -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alexander Kha Do Sent: Tuesday, March 19, 2002 6:44 PM To: NT 2000 Discussions Subject: Creating Domain Computer accounts Is it in the default domain policy where you specify who has rights to create new computer accounts in the domain??? The reason I'm asking is that our last admin allowed all authenticated users to do this and he has since left ... we of course want to change this to a specific group of people (i.e. tech staff) so that no bozos plug into our network and create rogue workstations. Thanks, Alex ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ********************************************************************* The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please re-send this communication to the sender and delete the original message or any copy of it from your computer system. Thank You. ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
