Add Computer Objects

  • Thread starter Thread starter CB
  • Start date Start date
C

CB

I have created a new OU for Computer Objects. I have broken them down by
departments. In our ENGR OU I have created a sub OU named LAB. I would like
to grant access to a group of users to add/remove computer objects. I am not
entirely clear if this is the same as joining a computer to the domain. I
have given the users rights to Create Computer Objects & Delete Computer
Objects. But when they try and add join the computer to the domain they get
an error saying the have reached their maximum computers they can add.

I intentionally lowered the Authenticated Users Rights to add computers
to the domain to 0. I would rather they didn't do this without our
knowledge.

Would this stop them from adding computers to the OU I granted them access
to?
Does the group need rights leading into the OU (Domain, OU-ENGR, OU-LAB)?

I am not sure how to get this working. I have done a lot of reading, but
nothing really points to my situation.

Any help is appreciated.

Thanks!
 
It seems that the users have hit the limit on the number of computer
accounts that they can join to the domain. By default there is a limit of
10. There is an attribute that you can modify to increase this limit. See
the following article
http://support.microsoft.com/default.aspx?scid=kb;EN-US;251335

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top