Link to home
Start Free TrialLog in
Avatar of jimlo1
jimlo1

asked on

How to add/delete a privilege "join computer to domain"

How to add/delete a privilege "join computer to domain"
Avatar of goyal_251
goyal_251
Flag of India image

you can give account operator rights to add/delete a privilege "join computer to domain
add the user in account operators group
Avatar of jimlo1
jimlo1

ASKER

HI all

I want to give only "join computer to domain" privilege
yes for this you need to add the user into "account operator"group in active directory to the person to whom you want to give privilege
Avatar of jimlo1

ASKER

Hi all

"Account Operators" - A built-in group that exists only on domain controllers. By default, the group has no members. By default, Account Operators have permission to create, modify, and delete accounts for users, groups, and computers in all containers and organizational units (OUs) of Active Directory except the Builtin container and the Domain Controllers OU. Account Operators do not have permission to modify the Administrators and Domain Admins groups, nor do they have permission to modify the accounts for members of those groups.

I can't give this built-in "account operators" group because they has a create & modify and delete functions in AD, So I want to provide a only "join computer to domain " privilege, So I want how to add/delete "join computer to domain" privilege?
Thank all

ASKER CERTIFIED SOLUTION
Avatar of KenMcF
KenMcF
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of jimlo1

ASKER

Do not fulfil my question