Add to Domain

A

Andy

I have an IT Helpdesk team that used to have Domain Admin rights. I want to
take them out of this group because it gives them too many rights. They
rebuild machines and need to add machines on to the domain. I have created a
security group called helpdesk and in the Default Domain group policy have
added the helpdesk group to the add computers into the domain, but they
still cant do it. Any pointers where I should be looking?


TIA

andy
 
C

Chriss3

This can't be done in a GPO, GPO are used to customize the end user desktop,
or the computer.

This can be done by delegate administrative control within Active Directory.

Step-by-Step Guide to Using the Delegation of Control Wizard:
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/delegsteps.asp

--
Regards,

Christoffer Andersson
No email replies please - reply in the newsgroup
If the information was help full, you can let me know at:
http://www.itsystem.se/employers.asp?ID=1
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Problems using Restricted Groups 1
"add workstations to domain" group policy restriction 2
Restricted Groups Problem 3
Removal of Restricted Groups Policy 2
Read Access on Group Policy 2
Security Filtering Group to use for Default Domain Policy 1
Administrative rights 1
Domain Controller Security Policy 3

Top