Block User Adding Computer to domain

[Smirnoff]

Hello

First i wanna say thanks to listen to me and sorry for my bad english

I've seen since NT5(2000 server) and NT5.2(2003 srv)
A user can add Computer Object (up to 10 maximum)

And i wanna denied access to that new specificity

i hope my quest is clear

Thanks alot for answer if u have one

Smirnoff

 

[m_pact]

Hello Smirnoff,

Open Active directory Users and Computers. Go to the root of the
domain, right mouse click and choose properties. Choose the Group
Policy tab, then choose edit. Navigate down to Computer
Configuration\Windows Settings\Security Settings\Local Policies\User
Rights Assignments. Look for "Add workstations to domain" and add the
groups or users that you want explicit access.

 

[Smirnoff]

m_pact a écrit avec des électrons à 100% recyclés...

Hello Smirnoff,

Open Active directory Users and Computers. Go to the root of the
domain, right mouse click and choose properties. Choose the Group
Policy tab, then choose edit. Navigate down to Computer
Configuration\Windows Settings\Security Settings\Local Policies\User
Rights Assignments. Look for "Add workstations to domain" and add the
groups or users that you want explicit access.

Thanks for all
it works fine ^^

 

[Smirnoff]

Hi,

Forget my last message, it doesnt work in fact ...
User can always add Machine into domain, and in that GPo i've just
allowed Domain/admin. And simple user can add machine.

DO u have another idea? or maybe i use wrong that GPO

Thanks for answer
Best regards

Smirnoff