Enable right to ad workstation to domain.  However, disable right to add server.

Posted on 2007-08-02
Last Modified: 2010-03-17
Enable AD group to add workstations to the domain.  However, prevent same group from adding server based OS
Question by:securitythreat
    LVL 70

    Accepted Solution

    To the best on my knowledge you can prevent someone adding or using a Domain controller but you cannot prevent member servers being added as these are effectively treated as workstations
    LVL 1

    Author Comment

    I was thinking the same.  However, someone mentioned to me that it was possible in R2
    LVL 11

    Assisted Solution

    Sorry i have even tried in R2 it is still the same . and i have also searched many forums most of them say as what KCTS said on the previous post.

    Hope this helps

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Suggested Solutions

    I came across this issue when setting up a two way forest level trust. so here's the scenario: A company wildcards acquired another company, bizworks ( both Fictitious). Wild cards: windows 2003 Domain & forest functional levels - Ad domain na…
    Companies that have implemented Microsoft’s Active Directory need to ensure that the Active Directory is configured and operating properly. If there are issues found and not resolved, it eventually leads the components to fail or stop working and fi…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now