can every domain user add a computer to a domain?

Bernard wrote:

> can every domain user add a computer to a domain?
>
Hi,

Active Directory domains allow any authenticated user the right to
create up to ten computer accounts in the domain by default.

More about this here:
http://support.microsoft.com/default...b;en-us;228146


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

"Bernard" wrote:

> can every domain user add a computer to a domain?
>
You sure can, if you have the correct privliages. eg. administrator

Bernard wrote:
> can every domain user add a computer to a domain?
>


No. Normally, only domain administrators can add computers to the
domain, but they can also delegate this task by explicitly granting the
privilege to other users or groups.


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

Torgeir Bakken (MVP) wrote:

> Hi,
>
> Active Directory domains allow any authenticated user the right to
> create up to ten computer accounts in the domain by default.
>
> More about this here:
> http://support.microsoft.com/default...b;en-us;228146
>
>


Wish I'd read that before I responded. ;-} However, I'm having a real
hard time imagining that any security conscious domain admin would leave
the default permissions in place.

--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH