Melanie,
There are various ways to grant the rights. To make this explicit to a
group, here are some helpful steps:
Grant the "Create Computer Objects" and "Delete Computer Objects" Access
Control Entries (ACEs) to the User
----------------------------------------------------------------------------
-----------------------------------------
1. From the the Active Directory Users and Computers snap-in, click
Advanced Features on the View menu so that the Security tab is exposed
when you click Properties.
2. Right-click the Computers container, and then click Properties.
3. On the Security tab, click Advanced.
4. On the Permissions tab, click Authenticated Users, and then click
View/Edit. NOTE: If the Authenticated Users group is not listed, click
Add and add it to the list of permission entries.
5. Make sure the "This object and all child objects" option is
displayed in the "Apply onto" box.
6. From the Permissions box, click to select the Allow check box next
to the Create Computer Objects and Delete Computer Objects ACEs, and
then click OK.
Jody Lockridge [MSFT]
