DSADD Computer

[Megan Kielman]

Is there a way to use 'dsadd computer' to create an computer account and
specify the user or group that can join the computer to the domain like you
can using the GUI???

 

[Jeremy@gilbarco]

You can use netdom to add machines to domains, but the
user would have to have the right in the first place.

 

[Herb Martin]

Is there a way to use 'dsadd computer' to create an computer account and
specify the user or group that can join the computer to the domain like you
can using the GUI???

If you use DSAdd to add the computer then the computer is
ALREADY in the domain.

If you mean to give users the right/permission to run it then
that must be done ahead of time using AD Users/Computers
or another tool.
[/QUOTE]

 

[Megan Kielman]

Actually the 'dsadd computer' utility CREATES the computer account in the
domain. I am simply wondering if there is a switch to specify who has the
right to join it to the domain.

If you use DSAdd to add the computer then the computer is
ALREADY in the domain.

If you mean to give users the right/permission to run it then
that must be done ahead of time using AD Users/Computers
or another tool.

[/QUOTE]

 

[Herb Martin]

Sure, those are easiest to find in either the Rights dialogs (Security
or GPO settings) or by using Permissions in AD Users and Computers
(including the Delegation of Control Wizard at the top of the
right click on a Domain or OU.)

--
Herb Martin

Actually the 'dsadd computer' utility CREATES the computer account in the
domain. I am simply wondering if there is a switch to specify who has the
right to join it to the domain.

[/QUOTE]

 

[Joe Richards [MVP]]

Nope. DSADD is a simple LDAP Object Creation tool. The permissions to allow who
can join are just that permissions, they are part of the security descriptor
which while it could be done through LDAP type calls would be painful at best.
You can script this stuff though or use netdom or if you set the OUs up with the
proper permissions ahead of time, then you can create computer objects in OUs
that allow the specific folks you want to do the joins.