Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Computers randomly joining domain

Posted on 2007-08-06
1
Medium Priority
?
186 Views
Last Modified: 2010-04-18
I have a windows 2003 domain and somehow over the weekend a computer joined my domain called NICK-DOG. None of the computers in my organization are named like that, atleast not by me. When I remote desktop into the computer, it connectes me to a computer with the proper naming convention that I have set up for our organization. The computer that it directs me to has a valid computer account in AD. This happened last week with a different computer name and I simply deleted it from the domain. My questions are...

how did this computer join my domain without my authority?
How do I tell who joined it to the domain?
How did it join under the name NICK-DOG when it is named something else?
How can I prevent this from happening again?

0
Comment
Question by:twcadmin
1 Comment
 
LVL 31

Accepted Solution

by:
Toni Uranjek earned 1500 total points
ID: 19638268
Hi!

Every domain user can add up to 10 computers to domain by default.
This can be changed in Deafult domain policy, you should remove user right "Add workstations to domain" from Authenitcated users group.
Check your Security logs for event with ID: 645 "Computer account created" for details.

HTH

Toni
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A new hacking trick has emerged leveraging your own helpdesk or support ticketing tools as an easy way to distribute malware.
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question