Solved

Minimum user rights to join domain?

Posted on 2004-09-14
8
848 Views
Last Modified: 2012-06-21
Weare running Windows 2000 Server on our networtk. To make our life easier, we have a bunch of people joining the clients to our domain after being imaged. What are the minimum rights we have to give them, so that the only thing they can do is to join a client to our domain?
0
Comment
Question by:ekrisch
  • 2
  • 2
8 Comments
 
LVL 67

Accepted Solution

by:
sirbounty earned 125 total points
ID: 12053064
>>Method 2: Grant the "Create Computer Objects" and "Delete Computer Objects" Access Control Entries (ACEs) to the User
From the Active Directory Users and Computers snap-in, click Advanced Features on the View menu so that the Security tab is exposed when you click Properties.
Right-click the Computers container, and then click Properties.
On the Security tab, click Advanced.
On the Permissions tab, click Authenticated Users, and then click View/Edit.

NOTE: If the Authenticated Users group is not listed, click Add and add it to the list of permission entries.
Make sure the This object and all child objects option is displayed in the Apply onto box.
From the Permissions box, click to select the Allow check box next to the Create Computer Objects and Delete Computer Objects ACEs, and then click OK. <<

ref: http://support.microsoft.com/?kbid=251335
 
This may also come in handy:
http://support.microsoft.com/?id=315273
http://support.microsoft.com/?id=150493

http://www.winnetmag.com/Article/ArticleID/13524/13524.html
"if you are not a domain administrator the account needs to be added in advance and then you join the domain."
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12054815
Each domain user has the right to join the domain with his username up to a certain number of time.. I think it is 10..

Yes it is :)


An ordinary domain user can join 10 members to the domain
http://www.jsiinc.com/SUBE/tip2200/rh2216.htm
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 12058774
I 'think' that's still if they've been added aforehand, is it not?`
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12058830
Yes, they must have been added to the active directory before.. that's for sure.. once they are in, they can make up to 10 computers join the domain.
0
 
LVL 2

Expert Comment

by:jodyriding
ID: 13098980
ok here it goes. If you are using AD you can also adjust the GPO and goto the section named
windows settings
security settings
local policies / user rights assignment under that section is a tab called Add workstations to domain.
In there you can select users to be able to be in this tab. we just made all of our engineers be able to do this. That way we wouldn't have to add each user individually

0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now