Need a user to add computers to the domain without having domain admin rights
Posted on 2004-03-25
I have a user called wsadmin. This user is my workstation administrator and has local admin rights on all workstations. User can not log on locally to any server. I need this user to be able to add systems to the domain since he builds them. I tried Group Policy in the User Rights Assignment section and added him to Add workstations to domain. Didn't work. I also tried adding user to Account Operators group which didn't work. Anyone know a good way to allow user to add systems to the domain withought being a member of domain admins?
P.S. I thought of runas but you have to supply password. I do not want this user to have the password for a domain admin account.