Add computer to domain rights

[Henry]

I have a user in my company who seems to be able to add
computers to the domain, when i dont remember delegating
any permissions to him.

I have looked in the "security" tab of the domain to see
if he is listed as having rights, but found nothing.

Can someone suggest a way to find out where he is
obtaining these rights?

Thanks,

 

[Chriss3]

Henry by defaults every domain user are avaiblel to add 10 computers to
Active Directory.

Read Method 3: Override the Default Limit of the Number of Computers an
Authenticated User Can Join to a Domain in the follow article:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;251335

I hope that helps, have a nice day!

 

[john]

In Windows 2000 the Add Workstation to Domain right gives
the user a quota that is set to 10 computers by default.
You may want to check there. Also check Create Computer
Objects right in Active Directory.

References: Windows 2000 Server Resource Kit: Join and
Authentication Issues

http://www.microsoft.com/technet/prodtechnol/windows2000ser
v/reskit/distsys/part5/dsgappd.asp

cyberkid247