?
Solved

How to add/delete a privilege "join computer to domain"

Posted on 2010-09-21
10
Medium Priority
?
1,207 Views
Last Modified: 2012-08-13
How to add/delete a privilege "join computer to domain"
0
Comment
Question by:jimlo1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
10 Comments
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723123
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723136
you can give account operator rights to add/delete a privilege "join computer to domain
0
 
LVL 1

Expert Comment

by:natlinthara
ID: 33723219
add the user in account operators group
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 

Author Comment

by:jimlo1
ID: 33723262
HI all

I want to give only "join computer to domain" privilege
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723299
yes for this you need to add the user into "account operator"group in active directory to the person to whom you want to give privilege
0
 

Author Comment

by:jimlo1
ID: 33723438
Hi all

"Account Operators" - A built-in group that exists only on domain controllers. By default, the group has no members. By default, Account Operators have permission to create, modify, and delete accounts for users, groups, and computers in all containers and organizational units (OUs) of Active Directory except the Builtin container and the Domain Controllers OU. Account Operators do not have permission to modify the Administrators and Domain Admins groups, nor do they have permission to modify the accounts for members of those groups.

I can't give this built-in "account operators" group because they has a create & modify and delete functions in AD, So I want to provide a only "join computer to domain " privilege, So I want how to add/delete "join computer to domain" privilege?
Thank all

0
 
LVL 27

Accepted Solution

by:
KenMcF earned 1500 total points
ID: 34661026
0
 

Author Closing Comment

by:jimlo1
ID: 34949514
Do not fulfil my question
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows 10 Creator Update has just been released and I have it working very well on my laptop. Read below for issues, fixes and ideas.
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question