[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 997
  • Last Modified:

Computer account of PC removed from domain remains in Active Directory

Greetings,
When a tech who is in the domain "Account operators" group logs  onto a PC and takes it out of the domain by putting it into a workgroup, the computer account of that PC will disappear from Acitve Directory. But when a technichan who is not an account operator (but has the delegated right to create & delete computer objects ) removes a PC from the domain by putting it into a workgroup, the computer leaves the domain but the account does not disappear from Active Directory.  I want to enable the technicians to remove a PC from the domain and have the computer account automatically disappear from AD. However, I do not want to  adding their user accounts to the account operators group.  Is there a way to accomplish this?
0
bradber
Asked:
bradber
2 Solutions
 
LuvJesus2DayCommented:
As long as you have your computer objects located in their own container I would grant the technician group (I assume you are using groups...if not you need to) full control on computer objects in the OU, not just create/delete, in order to make sure they are unhindered in their tasks.
0
 
bradberAuthor Commented:
Hi LuvJesus

Thanks for yor response. I'm sure that would work but I am looking for a more granular method, as there are many rights that I do not want to give away to the techs.  They already have the "delete computer object" right but apparently that is not enough. It might be possible to do this without assigning special permissions but it is not apparent to me which one would do the trick. Suggestions?
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now