Solved

How to add/delete a privilege "join computer to domain"

Posted on 2010-09-21
10
1,203 Views
Last Modified: 2012-08-13
How to add/delete a privilege "join computer to domain"
0
Comment
Question by:jimlo1
10 Comments
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723123
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723136
you can give account operator rights to add/delete a privilege "join computer to domain
0
 
LVL 1

Expert Comment

by:natlinthara
ID: 33723219
add the user in account operators group
0
Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

 

Author Comment

by:jimlo1
ID: 33723262
HI all

I want to give only "join computer to domain" privilege
0
 
LVL 4

Expert Comment

by:goyal_251
ID: 33723299
yes for this you need to add the user into "account operator"group in active directory to the person to whom you want to give privilege
0
 

Author Comment

by:jimlo1
ID: 33723438
Hi all

"Account Operators" - A built-in group that exists only on domain controllers. By default, the group has no members. By default, Account Operators have permission to create, modify, and delete accounts for users, groups, and computers in all containers and organizational units (OUs) of Active Directory except the Builtin container and the Domain Controllers OU. Account Operators do not have permission to modify the Administrators and Domain Admins groups, nor do they have permission to modify the accounts for members of those groups.

I can't give this built-in "account operators" group because they has a create & modify and delete functions in AD, So I want to provide a only "join computer to domain " privilege, So I want how to add/delete "join computer to domain" privilege?
Thank all

0
 
LVL 27

Accepted Solution

by:
KenMcF earned 500 total points
ID: 34661026
0
 

Author Closing Comment

by:jimlo1
ID: 34949514
Do not fulfil my question
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In-place Upgrading Dirsync to Azure AD Connect
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question