PC Review


Reply
Thread Tools Rate Thread

adding workstation to domain

 
 
=?Utf-8?B?R2FyeQ==?=
Guest
Posts: n/a
 
      25th Oct 2004
Hello,
I'm using default domain group policy.
I've changed the right of "adding workstation to domain" allowing to use the
right for Enterprise and Domain admins groups only.
The right still doesn't work -- regular users can add workstations to domain.
I missed something.
I will be very grateful for any help.
Thanks,
Gary

 
Reply With Quote
 
 
 
 
S.J.Haribabu
Guest
Posts: n/a
 
      25th Oct 2004
Hello Gary,

Thanks for the posting. Go through the following article to resolve the
problem.

The Add workstations to domain user right lets a user add as many as 10
computers to a domain. By default, Windows 2000 grants the Add workstations
to domain right to Authenticated Users. Therefore, in a default-configured
domain, everyone in the forest can add as many as 10 computers to each
domain in the forest. I recommend deleting this right assignment in the
Default Domain Controllers Policy Group Policy Object (GPO) to keep
unwanted computers from your domains.

The Create computer objects permission on an OU lets you add any number of
new computers to that OU. By default, only Administrators and Account
Operators have this permission on OUs.

Using one of these two rights, you have three ways to add a computer to a
domain. First, here's one way you can use the Add workstations to domain
right. Toward the end of a Windows installation, Windows asks you whether
the computer should be a member of a domain. If you choose to add the
system to a domain, the program prompts you for the computer's name and the
name of the domain in which to create its account. Win2K creates the new
computer account in the AD Computers container, which you can view in the
Microsoft Management Console (MMC) Active Directory Users and Computers
snap-in.

Second, you can use the "net computer <computer name> /add" command to
create the computer account. This method also creates the account in the AD
Computers container in the Active Directory Users and Computers snap-in in
the domain of the computer on which you execute the command. Later, when
you install Windows on another computer and Windows asks you for a computer
name and domain, you can claim the newly created computer account.

I hope it would solve your issue.

Thanks,
(E-Mail Removed)

This posting is provided "AS IS" with no warranties, and confers no rights.




 
Reply With Quote
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Need help please, Having trouble finding/adding users for purpose of granting permissions or adding them to groups in a win 2k domain on an XP workstation. rmalph@happy.days Microsoft Windows 2000 Security 4 16th Oct 2004 07:11 AM
Need help please, Having trouble finding/adding users for purpose of granting permissions or adding them to groups in a win 2k domain on an XP workstation. rmalph@happy.days Microsoft Windows 2000 New Users 1 12th Oct 2004 07:13 PM
Need help please, Having trouble finding/adding users for purpose of granting permissions or adding them to groups in a win 2k domain on an XP workstation. rmalph@happy.days Microsoft Windows 2000 Deployment 0 11th Oct 2004 11:39 PM
Need help please, Having trouble finding/adding users for purpose of granting permissions or adding them to groups in a win 2k domain on an XP workstation. rmalph@happy.days Microsoft Windows 2000 0 11th Oct 2004 11:37 PM
Need help please, Having trouble finding/adding users for purpose of granting permissions or adding them to groups in a win 2k domain on an XP workstation. rmalph@happy.days Microsoft Windows 2000 Deployment 0 11th Oct 2004 11:35 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 04:01 AM.