Solved

How to grant an employee ability to add a computer to the domain

Posted on 2008-10-01
2
270 Views
Last Modified: 2010-04-18
I have a small office network with a domain.  I have a training area that has some computers in a workgroup.  I want to add them to our domain.  I have a resource available to assist and would like to grant the resource permission to add computers to the domain.  I know i could elevate the resource to "domain admin" but this seems like overkill.  How can i setup the account to have the ability to add computers to the domain?
0
Comment
Question by:EdSoftware
2 Comments
 
LVL 17

Expert Comment

by:Andres Perales
ID: 22616650
you can give that use account operators priledges or you could, add the computer account to domain first and when you that you should see a button on who can add that computer to the domain, select that users account in AD and he will be able to add that computer to the domain.
0
 
LVL 17

Accepted Solution

by:
JohnGerhardt earned 50 total points
ID: 22616705
Be careful about adding the user account operator status as although this will give them rights to add a PC they will also be able to reset password and perform other things to users...
Rather just delegate out the permission to add a computer to domain.
To do this then you just need to right click on the name of the domain and choose "DELEGATAE CONTROL" you can then choose the user account or group and then add the correct permission you need...
-Jaggie
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question