[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

How to add/delete a privilege "join computer to domain"

Posted on 2010-09-21
10
Medium Priority
?
1,208 Views
Last Modified: 2012-08-13
How to add/delete a privilege "join computer to domain"
0
Comment
Question by:jimlo1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
10 Comments
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723123
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723136
you can give account operator rights to add/delete a privilege "join computer to domain
0
 
LVL 1

Expert Comment

by:natlinthara
ID: 33723219
add the user in account operators group
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:jimlo1
ID: 33723262
HI all

I want to give only "join computer to domain" privilege
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723299
yes for this you need to add the user into "account operator"group in active directory to the person to whom you want to give privilege
0
 

Author Comment

by:jimlo1
ID: 33723438
Hi all

"Account Operators" - A built-in group that exists only on domain controllers. By default, the group has no members. By default, Account Operators have permission to create, modify, and delete accounts for users, groups, and computers in all containers and organizational units (OUs) of Active Directory except the Builtin container and the Domain Controllers OU. Account Operators do not have permission to modify the Administrators and Domain Admins groups, nor do they have permission to modify the accounts for members of those groups.

I can't give this built-in "account operators" group because they has a create & modify and delete functions in AD, So I want to provide a only "join computer to domain " privilege, So I want how to add/delete "join computer to domain" privilege?
Thank all

0
 
LVL 27

Accepted Solution

by:
KenMcF earned 1500 total points
ID: 34661026
0
 

Author Closing Comment

by:jimlo1
ID: 34949514
Do not fulfil my question
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's recap what we learned from yesterday's Skyport Systems webinar.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question