Solved

How to grant an employee ability to add a computer to the domain

Posted on 2008-10-01
2
272 Views
Last Modified: 2010-04-18
I have a small office network with a domain.  I have a training area that has some computers in a workgroup.  I want to add them to our domain.  I have a resource available to assist and would like to grant the resource permission to add computers to the domain.  I know i could elevate the resource to "domain admin" but this seems like overkill.  How can i setup the account to have the ability to add computers to the domain?
0
Comment
Question by:EdSoftware
2 Comments
 
LVL 17

Expert Comment

by:Andres Perales
ID: 22616650
you can give that use account operators priledges or you could, add the computer account to domain first and when you that you should see a button on who can add that computer to the domain, select that users account in AD and he will be able to add that computer to the domain.
0
 
LVL 17

Accepted Solution

by:
JohnGerhardt earned 50 total points
ID: 22616705
Be careful about adding the user account operator status as although this will give them rights to add a PC they will also be able to reset password and perform other things to users...
Rather just delegate out the permission to add a computer to domain.
To do this then you just need to right click on the name of the domain and choose "DELEGATAE CONTROL" you can then choose the user account or group and then add the correct permission you need...
-Jaggie
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question