Account for joining computers to a domain.

[Devin M]

I am deploying Windows XP to multiple computers as part of an overall
network upgrade. I have done a Windows 2000 migration but joining to a
Windows NT domain. In that environment, I was able to create a login
account called "sysprep" that had rights ONLY to join computers to the
domain. This account had user rights, but with that one addition.
This account was used in the sysprep answer file, and for remote users
who I needed to give a domain computer account to. I am unable to find
such a feature in Win 2k and 2k3 AD environments.

I have combed this group as well as a few others, but can't seem to
find the right set of keywords. Any help would be greatly appreciated.

 

[Shenan Stanley]

I am deploying Windows XP to multiple computers as part of an overall
network upgrade. I have done a Windows 2000 migration but joining to
a Windows NT domain. In that environment, I was able to create a
login account called "sysprep" that had rights ONLY to join computers
to the domain. This account had user rights, but with that one
addition. This account was used in the sysprep answer file, and for
remote users who I needed to give a domain computer account to. I am
unable to find such a feature in Win 2k and 2k3 AD environments.

I have combed this group as well as a few others, but can't seem to
find the right set of keywords. Any help would be greatly
appreciated.

AD Users and Computers.
Right-Click on your domain.
Choose "Delegate Control".
Next.
Add the User/Group you would like to give this control to.
Next.
Check the "Join a computer to the Domain" checkbox.
Next.

You can take it from there (That's a Windows 2003 domain.)

How can I allow an ordinary user to add a computer to a domain?
http://www.jsifaq.com/subQ/tip8100/rh8144.htm