?
Solved

Domain Users adding Computers to Active Directory

Posted on 2006-04-13
1
Medium Priority
?
529 Views
Last Modified: 2013-12-04

It appears that my domain Win2003 AD users can add machines to the domain.

The Domain installation is default without much changes.

1) Can this be stopped
2) Is there a way to display everyone who has the ability to add a computer to the domain? I can see this with effective rights on a per user basis, I would like to find out how these machines have been getting added and stop this.
0
Comment
Question by:EGropp
1 Comment
 
LVL 18

Accepted Solution

by:
luv2smile earned 1000 total points
ID: 16444934
Yes, this is controlled by group policy.

Computer config- windows settings- security settings- local policies- user rights assignment- add workstation to the domain

If you have multiple policies, you'll have to figure out which one is controlling this. You can use the resultant set of policy tool to help with this- http://support.microsoft.com/default.aspx?scid=kb;en-us;323276
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
OfficeMate Freezes on login or does not load after login credentials are input.
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Suggested Courses
Course of the Month16 days, 5 hours left to enroll

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question