Title: RE: [ActiveDir] Remove the ability to create computer accounts in the computer container
Oops. I now see Guido's reply. My apologies for the redundancy.
-Original Message- From: Merry, Joel (US
- Philadelphia) Sent: Sun 3/9/2003 11:31 PM To:
[EMAIL PROTECTE
51 PM
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [ActiveDir] Remove the ability to create computer accounts in the
computer container
Yes that probably would work. I will give it a try.
Thanks
Greg Felzer
-Original M
reg Felzer [mailto:[EMAIL PROTECTED]
Sent: Thursday, February 27, 2003 7:40 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Remove the ability to create computer accounts in
the computer container
The web script authenticates against AD and checks for group membership in
the "Join Com
ay, February 27, 2003 9:40 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Remove the ability to create computer accounts
in the computer container
The web script authenticates against AD and checks for group membership
in
the "Join Computer to the Domain" group. If they are members of
] On Behalf Of Roger Seielstad
Sent: Wednesday, February 26, 2003 3:54 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Remove the ability to create computer accounts in
the computer container
Seeing as that's the default container for creating computer accounts, and
the onl
, February 26, 2003 3:40 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Remove the ability to create computer accounts in
the computer container
Greg,
If you restrict it so that no one except the user your web script
runs as can create accts and are specifying the container
livan, Kevin
Sent: Wednesday, February 26, 2003 11:47 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Remove the ability to create computer accounts in
the computer container
You may want to look into changing the default msDS-MachineAccountQuota.
This setting allows any user to create 10 com
You may want to look into changing the default msDS-MachineAccountQuota.
This setting allows any user to create 10 computer accounts by default.
You can change this via a script, LDP or ADSI edit. If you change the
default value to 0 then your delegation model will probably work but the
default beh
