Solved

Allow only desktop administrators to "add workstations to a domain" but prevent them from adding servers to the 2003 domain??

Posted on 2004-10-02
2
213 Views
Last Modified: 2010-04-19
Allow only desktop administrators to "add workstations to a domain" but how can prevent them from adding Windows 2000/2003 servers to the 2003 domain??
0
Comment
Question by:cmkmfg
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 12212557
I don't think you can. The domain will not know what sort of system the machine is until after it has joined.

Simon.
0
 
LVL 16

Accepted Solution

by:
JamesDS earned 250 total points
ID: 12215374
cmkmfg
The permissions you are seeking are not possible.

The permissions needed to join a workstation to the domain is essentially, create machine account, reset machine account password and reset DNS name on machine account.

A machine account is the same for Workstation and Server and is not identified as a server until it logs in for the first time (ie first reboot after a successful join).

If you store servers and workstations in different OUs you could limit addition of new computer accounts to the Servers OU, but that wouldn't stop servers being put into the wrong OU.

Cheers

JamesDS
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question