Hello Gary,
Thanks for the posting. Go through the following article to resolve the
problem.
The Add workstations to domain user right lets a user add as many as 10
computers to a domain. By default, Windows 2000 grants the Add workstations
to domain right to Authenticated Users. Therefore, in a default-configured
domain, everyone in the forest can add as many as 10 computers to each
domain in the forest. I recommend deleting this right assignment in the
Default Domain Controllers Policy Group Policy Object (GPO) to keep
unwanted computers from your domains.
The Create computer objects permission on an OU lets you add any number of
new computers to that OU. By default, only Administrators and Account
Operators have this permission on OUs.
Using one of these two rights, you have three ways to add a computer to a
domain. First, here's one way you can use the Add workstations to domain
right. Toward the end of a Windows installation, Windows asks you whether
the computer should be a member of a domain. If you choose to add the
system to a domain, the program prompts you for the computer's name and the
name of the domain in which to create its account. Win2K creates the new
computer account in the AD Computers container, which you can view in the
Microsoft Management Console (MMC) Active Directory Users and Computers
snap-in.
Second, you can use the "net computer <computer name> /add" command to
create the computer account. This method also creates the account in the AD
Computers container in the Active Directory Users and Computers snap-in in
the domain of the computer on which you execute the command. Later, when
you install Windows on another computer and Windows asks you for a computer
name and domain, you can claim the newly created computer account.
I hope it would solve your issue.
Thanks,
(e-mail address removed)
This posting is provided "AS IS" with no warranties, and confers no rights.
