GPO on default domain controllers OU

N

nwtest

I'm having a look on the GPO(default domain controllers
Policy) for Domain controllers and i found out that by
default, authenticated users has specific rights to join
computer to the domain.
What do you mean by this is it under only this Default DC
ou and not to the entire domain. Does this mean that any
users can join up to 10 machines in the domain controllers
OU.

As far as I understand this specific rights should be
placed in default domain policy(higher level) and not in
this default Domain controllers ou??(confuse here).
Please enlighten me.

What If i remove this right and add it instead to the
domain default policy what will be the diffrence..
 
S

Steven Umbach

That particular user right can only be configured at the Domain Controller
Policy level and will not apply if done at domain level. It does allow a regular
user to add up to ten workstations to the domain. --- Steve
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

GPO on Domain controllers OU for-Logon Locally 1
SDOU confusing me. 1
Default Domain Policy 2003 7
Default Domain Controllers Policy 8
ou gpo not applying over domain policy 1
Implement DCGPO to only a select few DCs in my domain? 2
Block Policy Inheritance not working as anticipated 4
GPO Processing Order and OUs 15

Top