Add Computer Objects

[CB]

I have created a new OU for Computer Objects. I have broken them down by
departments. In our ENGR OU I have created a sub OU named LAB. I would like
to grant access to a group of users to add/remove computer objects. I am not
entirely clear if this is the same as joining a computer to the domain. I
have given the users rights to Create Computer Objects & Delete Computer
Objects. But when they try and add join the computer to the domain they get
an error saying the have reached their maximum computers they can add.

I intentionally lowered the Authenticated Users Rights to add computers
to the domain to 0. I would rather they didn't do this without our
knowledge.

Would this stop them from adding computers to the OU I granted them access
to?
Does the group need rights leading into the OU (Domain, OU-ENGR, OU-LAB)?

I am not sure how to get this working. I have done a lot of reading, but
nothing really points to my situation.

Any help is appreciated.

Thanks!

 

[Tim Hines [MSFT]]

It seems that the users have hit the limit on the number of computer
accounts that they can join to the domain. By default there is a limit of
10. There is an attribute that you can modify to increase this limit. See
the following article
http://support.microsoft.com/default.aspx?scid=kb;EN-US;251335

--
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.