privilige to join workstations to domain.

[Guest]

hi...
every account in windows 2000 domain has the previlige to add 10 new
computers to the domain is there a way to controll this issue as i don't want
my domain users to join any workstation also i want my help desk team to add
as much as they want.
i am using windows 2000 advanced server with SP4
thanks for your help

 

[Pegasus \(MVP\)]

hi...
every account in windows 2000 domain has the previlige to add 10 new
computers to the domain is there a way to controll this issue as i don't want
my domain users to join any workstation also i want my help desk team to add
as much as they want.
i am using windows 2000 advanced server with SP4
thanks for your help

This is not correct:
- Only domain admins have the privilege to join workstations
to a domain. Ordinary users cannot do it.
- AFAIK there is no limit on how many PCs can be joined to a domain.
- However, the number of ***concurrent*** resource connections
is limited by the number of CALs you have installed.

 

[Jerold Schulman]

hi...
every account in windows 2000 domain has the previlige to add 10 new
computers to the domain is there a way to controll this issue as i don't want
my domain users to join any workstation also i want my help desk team to add
as much as they want.
i am using windows 2000 advanced server with SP4
thanks for your help

1. Run Adsiedit.msc as an administrator of the domain.
2. Expand the Domain NC node. This node contains an object that begins with "DC=" and reflects the correct domain name. Right-click this object, and then click Properties.
3. In the Select which properties to view box, click Both.
4. In the Select a property to view box, click ms-DS-MachineAccountQuota.
5. In the Edit Attribute box, type 0. This number represents the number of workstations that you want users to be able to maintain concurrently.
6. Click Set, and then click OK.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com